Privacy policy.

1. Who we are and what this covers

Revado ("we", "us") provides Revado Comms, an AI-powered patient communications platform used by dental and medical practices. This policy covers two things: (a) data we collect when you visit this website, and (b) how we handle data — including protected health information (PHI) — when we provide the product to a healthcare practice.

When we process PHI, we do so as a business associate to the practice you visit, under a Business Associate Agreement (BAA) as required by HIPAA. The practice is the covered entity and remains the owner of its patient data.

2. Data we collect on this website

If you browse this site, we collect standard technical information (IP address, browser type, pages viewed) and use analytics to understand how the site is used. If you fill out a form, book a demo, subscribe to the newsletter, or email us, we collect the contact details you provide (name, email, practice name) and use them to respond to you and to communicate about Revado.

We do not sell this information, and we do not use website data for third-party advertising.

3. Patient information in the product

When a practice uses Revado Comms, we process patient information on the practice’s behalf: contact details, appointment and schedule data, conversation recordings and transcripts (voice and text), and related chart context pulled from the practice’s practice management system.

We use this information only to deliver the service — answering and placing calls and texts, booking appointments, running campaigns the practice configures, and writing records back to the practice’s system. We never use patient information for advertising, never sell it, and never use one practice’s data to serve another.

Patients with questions about their health information should contact their practice directly — the practice controls its patient records; we act on its instructions.

4. Security

Patient data is encrypted in transit and at rest. Access to production systems is role-scoped, logged, and reviewed; every PHI access is timestamped and exportable. Our full security posture — including BAA process, subprocessor disclosure, SOC 2 status, and incident response — is described on our security page.

5. Subprocessors

We use a small set of vendors to deliver the service — telephony, LLM, SMS, and transcription providers — each bound by agreements covering the data category it handles. Subprocessors that touch PHI are disclosed in the BAA addendum, and the current list is available on request at trust@revado.ai.

6. Retention and deletion

PHI retention periods are defined in each practice’s BAA. When a practice terminates service, we return or delete its PHI according to that agreement. Website and marketing data is kept only as long as needed for the purposes above; you can ask us to delete your contact information at any time.

7. Your rights

Depending on where you live, you may have rights to access, correct, or delete personal information we hold about you (for example under the CCPA for California residents). For rights over health records held by your practice, HIPAA gives you rights you exercise with the practice directly.

To make a privacy request about data Revado holds, email trust@revado.ai. We respond within two business days and resolve verified requests within the timelines the applicable law requires.

8. Cookies

This website uses cookies necessary for it to function and analytics cookies to understand usage. We do not run third-party advertising cookies. You can control cookies through your browser settings.

9. Changes and contact

We will update this policy as the product and the law evolve, and the date at the top always reflects the current version. Material changes affecting practices under a BAA are communicated directly.

Questions about this policy: trust@revado.ai. General questions: hello@revado.ai.