Privacy Policy

PayBackMD ("PayBackMD," "we," "us") provides a platform that medical practices use to deliver refunds owed to their patients. This policy explains what information we collect, how we use it, and the choices you have. It applies to our website (paybackmd.com), the PayBackMD dashboard used by practices, and the refund claim experience used by patients.

Information we collect

• Practice account information — name, email address, role, and practice details provided when a practice signs up or invites team members.
• Patient information provided by practices — name, date of birth, mobile phone number, email address, and refund details (amount, reason). Practices provide this information to us solely so we can deliver their refunds.
• Payment information — when a patient chooses how to receive a refund, banking details are collected directly by our regulated payment processor. PayBackMD does not store patient bank account or card numbers.
• Usage information — standard technical data such as device type, browser, and pages visited, used to operate and secure the service.

How we use information

• Delivering refunds and operating the platform
• Sending transactional notifications about a refund (text message and/or email), including reminders until the refund is claimed or expires
• Verifying identity before a refund can be claimed
• Providing support, maintaining security, and complying with law

We do not sell personal information, and we do not use patient information for advertising.

Text messaging

Patients receive text messages only in connection with a refund issued by their medical practice, using contact information the patient provided to that practice. Message frequency varies with account activity — typically one notification per refund plus periodic reminders (by default every few days) until the refund is claimed or expires. Message and data rates may apply. Reply HELP for help or STOP to opt out of text messages at any time; after opting out you will receive one final message confirming your opt-out.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except for vendors and service providers who assist us in sending the messages themselves.

How we share information

We share information only with: (a) the medical practice that issued your refund; (b) service providers that operate parts of the platform on our behalf — our payment processor, text-messaging and email delivery providers, and cloud hosting — each bound to use the information only to provide their service; and (c) authorities when required by law.

Health information

PayBackMD works with medical practices and treats patient information with the safeguards appropriate to health-adjacent data, including encryption in transit and at rest, role-based access controls, and audit logging. Where required, PayBackMD enters into Business Associate Agreements with participating practices.

Retention and your choices

We retain information for as long as needed to provide the service, meet legal and audit obligations, and resolve disputes. Patients may opt out of text messages at any time by replying STOP. To request access to or deletion of your information, contact your medical practice or email us at privacy@paybackmd.com.

Changes and contact

We may update this policy from time to time; the date above reflects the latest revision. Questions? Email privacy@paybackmd.com.