Privacy Policy

1. Introduction

Saga Health, Inc. ("Saga," "we," "us," or "our") operates the website usesaga.ai and provides AI-powered patient communication services for healthcare organizations. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

2. Information We Collect

We may collect the following types of information:

Information you provide directly: When you request a demo, contact us, or sign up for our services, we may collect your name, email address, phone number, organization name, and job title.

Usage data: We automatically collect certain information when you visit our website, including your IP address, browser type, operating system, referring URLs, pages visited, and timestamps.

Protected Health Information (PHI): In the course of providing our services to healthcare organizations, we may process PHI on behalf of our clients as a Business Associate under HIPAA. This PHI is governed by our Business Associate Agreements and is never used for marketing purposes.

3. How We Use Your Information

We use the information we collect to operate and improve our website and services, respond to your inquiries and demo requests, communicate with you about our services, comply with legal obligations, and protect against fraud and unauthorized access. We do not sell your personal information to third parties.

4. HIPAA Compliance

Saga is committed to compliance with the Health Insurance Portability and Accountability Act (HIPAA). When we process PHI on behalf of healthcare organizations, we do so under a signed Business Associate Agreement (BAA). We implement administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of PHI in accordance with HIPAA requirements.

5. Data Sharing and Disclosure

We may share your information with service providers who assist in operating our website and services (such as hosting and analytics providers), as required by law or in response to valid legal process, and in connection with a merger, acquisition, or sale of assets. All service providers that handle PHI are required to enter into Business Associate Agreements with us.

6. Data Security

We use industry-standard security measures to protect your information, including encryption in transit and at rest, access controls, and regular security assessments. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain personal information for as long as necessary to provide our services and fulfill the purposes described in this policy, unless a longer retention period is required by law. PHI is retained in accordance with HIPAA requirements and our Business Associate Agreements.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal information, opt out of marketing communications, and request information about our data practices. To exercise these rights, please contact us at the information below.

9. SMS and Text Messaging

Our services include AI-powered SMS communication with patients on behalf of healthcare organizations. Patients may opt out of text messages at any time by replying STOP. Message frequency varies. Message and data rates may apply. We do not send marketing text messages — all SMS communications are related to patient care coordination.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Saga Health, Inc.
Email: privacy@usesaga.ai