Privacy Policy

MedMojo™ is operated by Digital Commerce Collective LLC ("MedMojo™," "we," "us," or "our"). MedMojo™ is software that helps independent medical practices manage prior authorizations, denials and appeals.

This policy covers two different kinds of information, and we handle them under different rules:

• Business information from people who visit medmojo.ai, contact us, or use a MedMojo™ account: your name, work contact details and how you use our website and portal.
• Patient information that a practice enters into the MedMojo™ portal. We handle it only for that practice, under a signed Business Associate Agreement (BAA). Section 5 explains how.

1. Information We Collect

What you give us. Your name, work email, phone number, practice name, specialty and role when you book a demo, start a free month, take an assessment, request a resource or write to us. If your practice signs up, we also keep the names, work emails and roles of the staff who get accounts.

What our website collects automatically. Like most websites, medmojo.ai records technical details about visits: your IP address, browser and device type, the pages you view, the site that referred you, and cookie identifiers. Section 8 lists the tools that do this.

What we receive from others. We research practices we may contact using public sources and business contact databases, and we receive introductions from referral partners. This is business contact information only.

What the portal records. When someone signs in to the portal at portal.medmojo.ai, we record who signed in, when, and what they viewed, changed or exported. This audit record is part of our HIPAA safeguards and protects the practice.

2. How We Use It

• To answer your questions, schedule demos and send what you asked for.
• To set up and support your practice's accounts, and to keep them secure.
• To tell you about MedMojo™ products and updates. You can unsubscribe at any time.
• To understand which pages and ads work, so we can improve our website.
• To meet legal obligations and enforce our agreements.

3. We Do Not Sell Your Information

We do not sell personal information, and we never sell, rent or market with patient information. Our website does use advertising tools from Google and Meta (section 8). Some state privacy laws treat that kind of advertising measurement as "sharing." To opt out of it, use the browser controls in section 8. Our website does not yet respond to Global Privacy Control or Do Not Track signals.

4. Who We Share It With

• Service providers that run our website, forms, scheduling and email, and the advertising and analytics companies listed in section 8.
• Your own practice. Staff with accounts see the information their practice's permissions allow.
• When the law requires it, or to protect the security of our services.
• If the business changes hands, subject to this policy and to the BAAs in force.

5. Patient Information and HIPAA

Under HIPAA, MedMojo™ is a business associate of the practices that use it. That means:

• A BAA is signed before any account is created. No patient information enters the portal before then.
• We use patient information only to provide the service to the practice that entered it, as its BAA allows. Never for marketing. Patient information never reaches our website or advertising tools.
• We store what a prior authorization needs: patient identifiers, diagnosis and procedure codes, the clinical findings the practice records, the documents MedMojo™ drafts, payer decisions, denials and appeals. We do not store full clinical notes or chart documents.
• Only two companies process patient information for us, each under its own BAA: Microsoft (Azure hosting in the United States, and sign-in) and Anthropic (the AI described in section 6). We do not add another without notice to our customers.
• The portal carries no analytics, advertising pixels, session recorders or chat widgets. An automated check stops any release that would add one. The portal loads only typefaces from Google Fonts and a sign-in library from jsDelivr, which receive no patient information.

If you are a patient, your medical practice controls your information and answers requests to see or correct it. Please contact your practice. You may also write to privacy@medmojo.ai, and we will pass your request to the practice and help it respond.

6. How We Use AI

Some MedMojo™ features use Claude, an AI model from Anthropic, to read a practice's records and draft prior authorization and appeal documents. Anthropic processes this information under a BAA signed April 21, 2026, and Anthropic's commercial terms prohibit it from training models on our customers' content. MedMojo™ does not use patient information to train AI models either.

Every document the AI drafts is a draft. A person at the practice reviews it and decides whether to send it. MedMojo™ sends nothing to a payer, makes no coverage decision and does not practice medicine.

7. How Long We Keep It

• Business contact information: while we have a business relationship or an open conversation, and deleted on request (section 9), except where we must keep it, such as portal audit records.
• Patient information: for as long as the practice uses MedMojo™. When a practice's agreement ends, it can request an export within 30 days, and its patient information is returned or destroyed within 60 days, with a certificate of destruction. Backups expire on a 30-day cycle, inside that deadline. Copies held by our subprocessors are deleted under the retention terms of their own BAAs.
• Audit records: at least six years, consistent with HIPAA's documentation rule.

8. Cookies and Website Tools

These tools run on medmojo.ai only, never in the portal:

• Google Analytics and Google Ads: visit and ad measurement. Opt out of Analytics at tools.google.com/dlpage/gaoptout.
• Meta Pixel: ad measurement on Facebook and Instagram. Manage it in your Facebook ad preferences.
• Microsoft Clarity: how visitors use our pages, so we can fix what is confusing.
• Calendly: booking a demo.
• Formspree: delivering the forms you send us.
• Google Fonts: the typefaces on our pages.

You can block or delete cookies in your browser settings, and use your browser's or the tool's own opt-out.

9. Your Choices and Rights

You can ask us to show you, correct or delete the business information we hold about you, or to stop marketing to you. Email privacy@medmojo.ai. Someone you authorize may ask on your behalf. We may need to confirm your identity, and we answer within 45 days. If we decline a request, you may appeal by replying to our answer, and we will review it again. We will not treat you differently for using these rights. Requests about patient information go to the practice that holds it (section 5).

10. Security

Every portal user signs in with their own account and multi-factor authentication. Each practice's records are separated by the database itself, data is encrypted in storage and in transit, and every access is recorded. No system is perfectly secure; if an incident affects patient information, we notify the practice as its BAA and the law require. Our security summary is available on request.

11. Children

Our website and services are for healthcare professionals. We do not knowingly collect information from anyone under 18 through our website. Practices may of course manage authorizations for patients of any age, under their BAA.

12. Changes to This Policy

When we change this policy, we update the date at the top. If a change affects how patient information is handled, we tell our customers directly before it takes effect.

13. Contact Us