Privacy Policy

Effective Date: July 17, 2026

ATUUNE ("ATUUNE," "we," "our," or "us") provides routing and continuity technology that helps people find outpatient mental health providers who may be a good fit, and helps Practices improve continuity of care.

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website, applications, and services (collectively, the "Services"). By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

We are a technology platform that supports provider discovery, patient-provider matching, onboarding, scheduling workflows, and continuity monitoring for outpatient mental healthcare.

We are not a healthcare provider, therapist, psychologist, psychiatrist, hospital, or emergency service, and do not provide medical advice, diagnosis, or treatment. See Section 9 for how this distinction relates to the handling of health information.

2. Information We Collect

The information we collect depends on how you interact with the Services.

A. Information You Provide

This may include:

  • Name, email address, and phone number
  • Account credentials
  • Organization or practice name
  • Professional license information
  • Practice information, availability, languages spoken, and specialties
  • Intake and appointment preferences
  • Messages sent through the Services
  • Information submitted through forms

B. Patient Matching Information

When using the Services to search for care, you may voluntarily provide information that helps us identify Providers who may be a good fit, such as:

  • Preferred therapy format
  • Scheduling and geographic preferences
  • Language and provider preferences
  • General intake responses

We design our intake process to minimize collection of information beyond what is necessary for matching.

C. Provider Information

Providers and Practices may provide information such as:

  • Professional credentials, license information, education, and certifications
  • Areas of practice and accepted patient populations
  • Office locations and availability
  • Other practice details

D. Automatically Collected Information

When you use the Services, we may automatically collect technical information, including:

  • IP address, browser type, device type, and operating system
  • Session information and error logs
  • Referring URLs, pages visited, and date and time of access

We use this information to improve security, performance, and reliability.

3. How We Use Information

We use information to:

  • Provide and operate the Services, including patient-provider matching and continuity monitoring
  • Create, manage, and authenticate Accounts
  • Operate provider and organization dashboards
  • Process subscriptions and payments
  • Respond to customer support requests
  • Send service-related communications
  • Detect fraud or abuse and maintain platform security
  • Improve product performance and matching quality
  • Comply with legal obligations

We do not sell personal information.

4. Communications

We may send account notifications, verification emails, appointment-related notifications, security alerts, billing notices, product updates, and customer support responses.

You may opt out of marketing communications at any time. You may continue to receive service-related communications that are necessary to operate your Account and the Services.

5. Cookies and Similar Technologies

We use cookies and similar technologies to keep users signed in, maintain security, remember preferences, and understand and improve website usage and performance.

You may control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Services.

6. Payments

Payment processing is handled by third-party payment providers. We do not directly store your complete payment card information. Payment providers process payment information in accordance with their own privacy policies.

7. Third-Party Services

The Services may integrate with third-party providers that help us operate the platform, including for cloud hosting, authentication, email delivery, analytics, payment processing, calendar synchronization, and customer support. These providers process information only as necessary to provide their services to us.

8. Data Security

We implement administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction. No security system is completely immune from risk, and we continually work to improve the security of the Services.

9. HIPAA and Protected Health Information

We are designed to support outpatient mental healthcare workflows. Depending on how a Practice configures and uses the Services, information processed through the Services may be subject to healthcare privacy laws, including the Health Insurance Portability and Accountability Act ("HIPAA").

Practices remain responsible for determining their own compliance obligations and for using the Services in accordance with applicable law. If a Business Associate Agreement ("BAA") is required for a particular deployment, it must be separately executed between us and the applicable covered entity before we process protected health information under that arrangement.

10. Data Retention

We retain information only as long as necessary to provide the Services, maintain security, resolve disputes, enforce agreements, and comply with legal obligations. Retention periods may vary depending on applicable law and contractual requirements.

11. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your information; restrict or object to certain processing; request data portability; and withdraw consent where processing is based on consent. To exercise these rights, contact us using the information in Section 15.

12. Children's Privacy

The Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will take reasonable steps to delete it.

13. International Users

If you access the Services from outside the country where our systems are operated, your information may be transferred to and processed in countries whose data protection laws may differ from those of your jurisdiction.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically. If we make material changes, we will update the Effective Date and, where appropriate, provide additional notice through the Services. Continued use of the Services after changes become effective constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions about this Privacy Policy or our privacy practices, you may contact us using the contact information provided on the ATUUNE website.