Privacy Policy & Terms of Service

Privacy Policy

GoTo Telemed Bill ("I", "me", "my") is a solo entrepreneurship committed to protecting the privacy and confidentiality of healthcare practices and their patients. This Privacy Policy explains how I collect, use, and safeguard information when providing billing and revenue cycle management services. It describes my approach to Data Privacy and Confidentiality in compliance with HIPAA and applicable state laws.

1. Information I Access

I do not handle, store, or download any patient data or sensitive information directly. Instead, I work within the provider's existing systems:

• Remote Access Only: I connect to the practice’s secure cloud EHR or practice management system (e.g., via encrypted remote login) solely to perform billing tasks. No data is ever copied, downloaded, or stored on my local devices beyond temporary viewing necessary for claim processing.
• Practice Information: I receive practice credentials (tax ID, NPI, provider details) via secure channels to set up billing and credentialing.
• Patient Information: While working inside the provider’s system, I may view protected health information (PHI) as needed to prepare claims, but I never retain or export it. All PHI stays within the provider’s environment.
• Communication Records: Emails and correspondence related to claims, appeals, and credentialing are stored in a password-protected, encrypted email system.

2. How I Use Information

I use information solely for the purpose of delivering contracted billing services:

• Preparing and submitting insurance claims via the provider’s clearinghouse or portal.
• Following up on accounts receivable and denials directly through payer portals.
• Credentialing providers with insurance panels (using CAQH or payer-specific portals).
• Generating practice financial reports based on data already within the provider’s system.

I never use patient data for any other purpose – no research, marketing, or secondary use. All work is performed under the direct authorization of the healthcare provider.

3. Data Privacy & Confidentiality

I maintain strict safeguards:

• All remote connections use multi-factor authentication and encrypted VPNs where required.
• I do not maintain a local database of patient information. Any temporary files created during billing (e.g., claim forms) are deleted immediately after submission.
• I sign Business Associate Agreements (BAAs) with each practice, agreeing to the same HIPAA obligations as covered entities.
• Confidentiality is paramount: I have completed HIPAA training and am bound by professional ethics.

4. Sharing of Information

I share information only as necessary to perform billing services and as directed by my clients. This may include:

• Insurance companies, clearinghouses, and third-party payers for claim adjudication.
• Credentialing organizations (e.g., CAQH) for provider enrollment.
• Third-party technology platforms (e.g., EHR support) under strict data protection agreements.
• When required by law, such as in response to a court order or government audit.

5. Data Retention

I do not retain PHI. My work is performed within the provider’s system; all records remain there. I may keep practice business records (invoices, contracts, correspondence) for up to 6 years as required for tax and legal purposes. These records contain no patient data.

6. Your Rights

Practice clients may request access to, correction of, or deletion of their practice business records. Patients should direct privacy requests to the healthcare provider they received services from, as I act as a business associate with no direct custody of patient data.

7. Changes to This Policy

I may update this Privacy Policy from time to time. Material changes will be communicated to clients via email or a notice on my website.

Terms of Service

These Terms of Service ("Agreement") govern the use of billing and revenue cycle management services provided by me, Shakisha Lawson, doing business as GoTo Telemed Bill ("I", "me", "my"), to healthcare practices ("Client", "you"). By engaging my services, you agree to the following terms.

1. Service Agreement Terms

Services are provided under a signed agreement between the Client and me. I provide medical billing, coding, credentialing, accounts receivable recovery, and practice financial reporting as described in the scope of work. Services continue until terminated by either party with 30 days' written notice.

2. Payment Terms (Net-30)

Invoices for monthly service fees (percentage‑based or fixed minimum) are generated on the first day of each month. Payment terms are Net-30 — the full amount is due within 30 days of the invoice date. Late payments may incur a 1.5% monthly finance charge (or the maximum allowed by law). Clients are responsible for all taxes, if applicable. I accept ACH, wire transfer, or check. Banking details are provided on each invoice.

3. Refund Policy (No Refunds)

4. Client Responsibilities

• Provide accurate and timely access to your EHR/system for claim processing.
• Respond promptly to requests for additional information needed for appeals or credentialing.
• Maintain the security of your system access credentials.
• Inform me immediately of any changes in practice information (address, tax ID, provider roster).

5. Limitation of Liability

To the fullest extent permitted by law, my liability for any claim arising out of my services shall not exceed the total fees paid by the client during the three months preceding the claim. I am not liable for consequential, incidental, or indirect damages, including lost revenues or delayed payments from insurance carriers. I do not guarantee that all claims will be paid; reimbursement depends on payer policies and patient eligibility.

6. Confidentiality & Data Use

I agree to maintain the confidentiality of all shared information. My handling of protected health information is governed by a separate Business Associate Agreement (BAA) and my Privacy Policy. I will not disclose client data except as required to perform services or by law. As stated in the Privacy Policy, I do not store patient data outside your systems.

7. Termination

Either party may terminate this agreement with 30 days' written notice. Upon termination, I will provide a final report and assist in transitioning services. Outstanding fees must be paid before final data transfer. I reserve the right to terminate immediately for non‑payment or material breach.

8. Governing Law

This Agreement shall be governed by the laws of the State of Florida without regard to its conflict of laws principles. Any disputes shall be resolved in the state or federal courts located in Hillsborough County, Florida.

9. Entire Agreement

These Terms of Service, together with the signed Service Agreement and any exhibits (including BAA), constitute the entire agreement between the parties and supersede all prior discussions.