Loa Healthcare Pricing API privacy & data

Name, postal address, e-mail, phone, account credentials

Insurance & Health-Related Data (may be PHI) Plan name, member ID, deductible status, clinician choices, claim documents, communications with providers

Payment-card token, subscription tier, billing address

IP address, device ID, browser type, session logs, cookies, pixels

Messages you send to Loa Care or that we send on your behalf to providers

Provide the Services (e.g., authenticate you, fetch insurance benefits, generate pricing e-mails, prepare claim forms).

Analyze and improve our Site, train models, and develop new features (using aggregated or de-identified data where feasible).

Comply with law (HIPAA, state privacy laws, consumer-protection statutes, accounting rules, law-enforcement requests).

Account Data & PHI: kept for the life of your account plus 7 years (standard healthcare claims retention) unless a longer period is required by law or requested by you.

Payment records: kept for at least 7 years under tax law.

Logs & device data: kept for 24 months then aggregated or deleted.

Practice outreach records (each e-mail sent, where the address came from, and any claim or reply): kept for 5 years.

Loa Care is based in the United States and uses service providers with international infrastructure and operations.

Information may be processed or accessed in the United States and other countries where those providers operate, including for network delivery, security, and support.

Service providers. Vercel and Cloudflare provide hosting, request delivery, and related infrastructure; Supabase provides database and authentication services; Mixpanel processes operational analytics.

Request account closure through the same contact process.

access or port your personal information

correct inaccuracies

delete certain data

opt-out of targeted advertising, data sales, or certain profiling

appeal denials of requests

We never sell your PHI or other sensitive data.