HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

1. Our Commitment to Your Privacy

FinVerified, Inc. is committed to maintaining the privacy of your Protected Health Information ("PHI") as required under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and the Health Information Technology for Economic and Clinical Health ("HITECH") Act. This Notice describes our legal duties and privacy practices with respect to PHI we receive in connection with providing our platform services to dental practices and healthcare organisations.

Important: FinVerified's compliance scoring and diagnostic systems do not store or process PHI directly. Patient-level data is identified only by anonymised session tokens. This Notice applies to any PHI that may be incidentally received through evidence vault uploads or support communications.

2. How We May Use and Disclose PHI

We may use and disclose your PHI for the following purposes:

• Treatment: To facilitate the provision of healthcare services by your dental practice, including coordinating patient financing disclosures and consent documentation
• Payment: To assist in billing and payment processing activities related to patient financing through the FinVerified platform
• Healthcare Operations: For quality assessment, compliance auditing, training of practice staff, and platform improvement activities
• As Required by Law: When required by federal, state, or local law, including regulatory examinations and law enforcement requests
• Business Associates: With our subprocessors who have signed a Business Associate Agreement and who assist us in providing our services

3. Your Rights Regarding PHI

You have the following rights with respect to your PHI:

• Right to Access: Request a copy of your PHI that we maintain
• Right to Amend: Request correction of inaccurate or incomplete PHI
• Right to an Accounting: Request a list of disclosures of your PHI we have made
• Right to Restrict: Request restrictions on certain uses or disclosures of your PHI
• Right to Confidential Communications: Request communications about your PHI through alternative means or at alternative locations
• Right to a Paper Copy: Request a paper copy of this Notice at any time

4. Our Duties

FinVerified is required by law to maintain the privacy of PHI, to provide you with this Notice, and to abide by the terms of this Notice currently in effect. We reserve the right to change our privacy practices and this Notice. Any revised Notice will apply to PHI already held by us as well as PHI we receive in the future.

5. Complaints

If you believe your privacy rights have been violated, you may file a complaint with FinVerified or with the U.S. Department of Health and Human Services Office for Civil Rights. To file a complaint with FinVerified, contact our Privacy Officer at privacy@finverified.ai. You will not be retaliated against for filing a complaint.

6. Contact