Legal

Privacy Policy

How we collect, use, and protect information through our platform and online services.

Evolve Care Partners LLC — Privacy Policy · Last modified: August 20, 2026

This Privacy Policy (“Privacy Policy”) supplements Evolve Care Partners LLC’s (“Company,” “we,” “us,” and “our”) Terms of Service and describes how we collect, use, maintain, protect, and disclose Personal Data about you through your use of our platform at carviq.co, including the Carviq web dashboard, mobile application, booking pages, and any related online services (the “Services”).

Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with this Privacy Policy, your choice is not to use the Services. By accessing or using the Services, you agree to this Privacy Policy. This Privacy Policy may change from time to time. Your continued use of the Services after we make changes is deemed to be acceptance of those changes, so please check this Privacy Policy periodically for updates. Capitalized terms used but not defined in this Privacy Policy have the meanings given in our Terms of Service.

Scope; Relationship to Health Information

Carviq is a healthcare field operations platform used by medical practices to manage patient scheduling, clinical communications, and care coordination. This Privacy Policy applies to Personal Data we collect through the Services that does not constitute Protected Health Information (“PHI”), as such term is defined by the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations, as amended (“HIPAA”).

All collection, use, and disclosure of PHI is governed by HIPAA and the applicable healthcare practice’s Notice of Privacy Practices (“NPP”), together with applicable state law. We maintain a signed Business Associate Agreement (BAA) with each healthcare practice using the platform. To the extent any provision of this Privacy Policy conflicts with our obligations under HIPAA or any BAA, our HIPAA obligations control.

Children’s Privacy

Our Services are directed to healthcare practices and their staff, not to children. We support and comply with the Children’s Online Privacy Protection Act (“COPPA”). The platform is not intended for use by children, and we do not knowingly collect Personal Data directly from children under 13 through the Services. Healthcare practices may store information about pediatric patients within the platform in connection with providing care; such information is treated as PHI governed by HIPAA and the practice’s NPP, not this Privacy Policy. If you believe we have collected information directly from a child under 13 through the Services without appropriate consent, please contact us at privacy@evolvecarepartners.com and we will take appropriate steps to delete that information.

Information We Collect About You and How We Collect It

Generally

We collect several types of information from and about users of the Services, specifically information:

by which you may be personally identified, such as name, email address, mobile telephone number, practice name, and payment information (for billing purposes only) (“Personal Data”);
that is about you but does not individually identify you, such as limited usage information; and
about your internet connection and the equipment you use to access the Services, to the limited extent collected.

We collect this information:

directly from you when you provide it to us (e.g., when you submit a contact form, request early access, or create a practice account);
automatically when you use the Services (e.g., usage patterns and access logs); and
from third parties, for example our payment processor or other service providers that support our business.

Information You Provide to Us

The information we collect on or through the Services includes information you provide by filling in forms on the platform, including practice registration, contact forms, and booking pages. We also collect records and copies of your correspondence if you contact us, and details of transactions you carry out through the Services.

Information We Collect Through Automatic Data Collection Technologies

Google Analytics. We use Google Analytics (GA4) to understand how visitors use carviq.co, including pages visited, device and browser information, and button clicks. We do not use Google Analytics Advertising Features, and we do not use this information to track you across other websites.

Server Logs. Our hosting infrastructure (AWS) collects standard server logs (such as IP address, browser type, and request timestamps) as part of operating and securing the platform. These logs are retained for security and debugging purposes and are not used for advertising.

How We Use Your Information

We use your Personal Data for purposes including to:

provide and administer the Services and respond to your inquiries;
create and manage practice accounts;
process payments and carry out our obligations and enforce our rights arising from any contracts between you and us, including for billing and collection;
communicate with you about your account and the Services;
send you product updates and service announcements;
comply with our legal obligations; and
for any other purpose with your consent.

SMS & Text Messaging

Carviq enables healthcare practices to send SMS/text messages to their patients and families for healthcare-related purposes, including appointment confirmations and reminders, on-the-way notifications with provider ETA, after-visit care summaries, scheduling updates, and practice announcements.

Consent is obtained when patients provide their phone number to their healthcare practice during intake, via the online booking page, or directly to their provider
Consent is not a condition of receiving care
Patients may opt out at any time by replying STOP to any message; reply HELP for assistance
Message frequency varies based on appointment schedule and practice communications
Standard message and data rates may apply
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes

See our full SMS Terms & Conditions for complete details.

Disclosure of Your Information

We do not sell your Personal Data, and we do not share your Personal Data for purposes other than those outlined in this Privacy Policy. We may disclose Personal Data that we collect or that you provide:

to service providers and other third parties that support our business, as described below under Subprocessors;
to a buyer or successor in the event of a merger, reorganization, dissolution, or sale or transfer of some or all of our assets;
to comply with any court order, law, or legal process, including responding to a government or regulatory request;
to enforce or apply our Terms of Service and other agreements, including for billing and collection; and
with your consent, or as otherwise disclosed when you provide the information.

We may also disclose aggregated or de-identified information that does not identify any individual without restriction.

HIPAA Compliance

Carviq runs on HIPAA-eligible AWS infrastructure. Every practice using the platform is covered by a signed Business Associate Agreement (BAA).

Encryption at rest (AES-256) and in transit (TLS 1.2+)
Signed BAA included with every plan
Comprehensive audit logging for all data access
Regular security reviews and vulnerability scanning

AI Transparency

AI assists — it never acts alone.

Carviq’s AI triages incoming messages by urgency, drafts responses in your provider’s voice, and generates pre-visit briefs from patient history. Here’s what it doesn’t do:

AI never sends a message without provider approval
AI never accesses data outside your practice’s environment
AI models are not trained on your patient data

Data Ownership

Your data is yours.

Protected health information (PHI) lives in your practice’s dedicated environment within our AWS infrastructure. Carviq does not sell, share, or use patient data for any purpose other than providing the Service to your practice.

PHI stored in HIPAA-eligible AWS environment
No selling or sharing of patient data — ever
Data export and deletion available on request
We do not access your data without explicit permission

Access Controls

Every provider gets their own login. No shared credentials, no shortcuts.

Biometric authentication (Face ID or PIN) per provider
Role-based permissions — MDs, RNs, and admins see only what they need
No shared credentials across providers
Automatic session timeouts

Infrastructure

Enterprise-grade cloud infrastructure, purpose-built for healthcare.

AWS App Runner for application hosting
Amazon RDS with encryption at rest
Amazon S3 with encryption and all public access blocked
US-based data centers (us-east-1)
No PHI cached or stored on mobile devices

Subprocessors

We only work with HIPAA-eligible vendors where PHI is involved.

Amazon Web Services (AWS) — Cloud infrastructure, data storage, AI processing (Bedrock), email delivery (SES)
Twilio — SMS notifications and family communications
SigmaMD — EHR integration and clinical data sync
Spruce Health — Clinical messaging platform integration
Google Analytics — Website analytics (carviq.co marketing site only; no PHI)

Consumer Health Data

Some information processed through the Services may be considered “consumer health data” under certain state laws. We collect and process such information only to provide and support the Services as described in this Privacy Policy. We do not sell consumer health data, and we share it only with service providers involved in providing the Services consistent with applicable law and the agreements we maintain with healthcare practices.

Your Rights and Choices

Depending on your state of residence, you may have rights regarding your Personal Data, which may include the right to access, correct, delete, or obtain a copy of your Personal Data, and to opt out of certain processing. To exercise any of these rights, please contact us at privacy@evolvecarepartners.com. We will respond consistent with applicable law. To protect your privacy, we may take steps to verify your identity before fulfilling your request.

Data Security

We have implemented measures designed to secure your Personal Data from accidental loss and from unauthorized access, use, alteration, and disclosure, including the use of encryption, role-based access controls, biometric authentication, and HIPAA-eligible cloud infrastructure. The safety and security of your information also depends on you; where you have credentials, you are responsible for keeping them confidential. The transmission of information via the internet is not completely secure, and we cannot guarantee the security of your Personal Data transmitted to the Services. Any transmission of Personal Data is at your own risk.

Retention

We keep your Personal Data while you have a relationship with us or while we are providing Services to you, and thereafter as necessary to respond to questions or claims, demonstrate compliance, and keep records required by law. When it is no longer necessary to retain your Personal Data, we will delete or de-identify it. Healthcare practices may request data export and deletion at any time upon termination of their subscription.

International Users

The Services are controlled and operated by us from the United States and are intended for users located in the United States. If you access the Services from outside the United States, you do so at your own risk and are responsible for compliance with local laws.

Changes to Our Privacy Policy

We may change this Privacy Policy at any time. If we make material changes to how we treat your Personal Data, we will post the updated policy on the Services and update the “Last modified” date above. We may also notify affected practices by email. You are responsible for periodically reviewing this Privacy Policy for changes.

Contact Information

If you have any questions, concerns, complaints, or suggestions regarding this Privacy Policy, contact us at:

Evolve Care Partners LLC
1515 Mockingbird Lane, Suite 4111
Charlotte, NC 28209
Email: privacy@evolvecarepartners.com
Phone: (980) 983-0643