Verq Check Privacy Policy

This policy describes how Verq, Inc. ("Verq," "we," "us") handles information in connection with Verq Check — the pre-signature note-review browser extension for WebPT and other supported electronic medical records (EMRs), and its related iOS/iPadOS application (together, the "Service"). It covers the Service only. Verq's other products and our corporate website are covered by the separate Verq Health Privacy Policy. Where you install Verq Check through the Apple App Store, Apple's own App Store privacy disclosures also apply, and the practices described here are consistent with the privacy information shown on our App Store listing.

Single purpose. Verq Check has one purpose: pre-signature review of the outpatient therapy (PT, OT, and SLP) note you have open in your electronic medical record (EMR), to surface potential Medicare documentation and billing issues before you sign. Everything below describes the data handling in service of that single purpose and nothing else.

To review a note, you grant Verq Check access to your EMR's documentation site. It then reads the clinical note on the page you have open — and only that page, on the EMR sites you authorize. Verq Check supports WebPT today and is expanding to additional EMRs; it requests access only to supported EMR documentation sites and to Verq's own analysis service, and does not read other websites, your login credentials, or your browsing activity.

We use the information above only to provide and operate the Service: to review the open note and return findings; to validate and enforce your organization's license; to keep the Service compatible, secure, and working; and to answer your support requests. We do not use your information for behavioral advertising, and we do not sell, rent, or license it.

The Verq Check app for iPad is distributed through the Apple App Store, and the practices described here apply to it as well as to the browser extension. Verq Check does not track you across other companies' apps or websites: it uses no advertising identifier (Apple's IDFA), requests no App Tracking Transparency permission, and sets no advertising cookies or SDKs. No account, name, or password is required to use Verq Check. To delete the limited data tied to your organization's license, use the in-product reset or email privacy@verqhealth.com. The privacy information shown on our App Store listing reflects these same practices.

Verq Check analyzes the de-identified note using automated and artificial-intelligence techniques, including a third-party AI provider, OpenAI, with which we maintain a Business Associate Agreement and data processing terms. OpenAI receives only de-identified content, does not receive PHI, and does not use your content to train its models.

We share information only with the service providers that help us operate the Service — our AI provider and our hosting/infrastructure provider — each under a written agreement that requires them to protect the information at a level consistent with this policy and to use it only to provide services to us. We may also disclose information if required by law or legal process, to protect rights and safety, or to a successor in a merger, acquisition, or sale of assets. The current list is on our sub-processors page. We provide equal or greater protection obligations on any third party with whom data is shared.

When subscription billing is enabled, payments are processed by Stripe, Inc. Stripe receives your billing information only; it never receives any clinical content or note data.

Because Verq Check acts largely as a service provider to your organization, requests from individual clinicians or members are generally directed to the organization that licenses the Service. For information we hold directly, you may request access, correction, deletion, or portability, or opt out of non-essential communications, by emailing privacy@verqhealth.com. California residents have additional rights under the CCPA/CPRA, including the right to know, delete, and opt out of sale (we do not sell personal information). We will not discriminate against you for exercising these rights.

We protect information with encryption in transit (TLS 1.2+) and at rest, least-privilege access controls, and vendor agreements that forbid using your data to train models or for any purpose other than providing the Service. Information is stored and processed in the United States. No security measure is perfect, and we cannot guarantee absolute security.

Our marketing website (verq.ai) may use privacy-respecting, first-party analytics such as Google Analytics 4 to understand site usage. We do not run advertising trackers on the site, and the Verq Check extension and app set no advertising cookies. You can limit analytics through your browser settings or Google's opt-out add-on.

privacy requests: privacy@verqhealth.com · product support: support@verq.ai · security: security@verq.ai
Verq, Inc., 12620 Beach Blvd, Ste. #3-279, Jacksonville, FL 32246

See also our End User License Agreement and sub-processors.