Privacy Policy

VyloriaFlow is a brand operated by Treinador International LLC (“VyloriaFlow”, “we”, “us”, or “our”). We provide medical billing and revenue cycle management, custom software and design, and AI agents for healthcare and other businesses.

This Privacy Policy explains how we collect, use, share, and protect information through our website and services. By using our website or services, you agree to the practices described here.

Information you provide: when you contact us or request a quote, we collect details such as your name, email address, company name, the nature of your inquiry, and any message you send us.

Information collected automatically: like most websites, we may collect limited technical data such as your IP address, browser type, device information, and usage data through cookies and similar technologies.

Client and patient data: when we provide medical billing or revenue cycle management, we may process protected health information (PHI) and other data on behalf of our clients. We handle this data strictly under our agreements with those clients (see Section 4).

We use the information we collect to respond to your inquiries and provide quotes, to deliver and improve our services, to communicate with you about your account or requests, to maintain the security and integrity of our systems, and to comply with legal obligations.

We do not sell your personal information.

When we handle PHI in the course of medical billing or revenue cycle management, we act as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA).

We enter into Business Associate Agreements (BAAs) with our clients and, where applicable, flow down equivalent obligations to any subcontractors. We apply the minimum necessary standard, use and disclose PHI only as permitted by our BAAs and by law, and support patient rights such as access to and amendment of records handled on a client’s behalf.

We maintain administrative, physical, and technical safeguards designed to protect your information. These include encryption of data in transit and at rest, role-based access controls, audit logging, and regular security reviews and workforce training.

No method of transmission or storage is completely secure, but we work to protect your information using industry-accepted practices.

We may share information with trusted service providers and subcontractors who help us operate (for example, cloud hosting or communication tools), all bound by confidentiality and, where PHI is involved, by Business Associate Agreements.

We may also disclose information when required by law, to protect our rights, or in connection with a business transaction such as a merger or acquisition.

We may use cookies and similar technologies to operate our website, remember preferences, and understand how the site is used. You can control cookies through your browser settings; disabling them may affect some functionality.

Depending on your location, you may have the right to access, correct, delete, or restrict the use of your personal information, and to object to certain processing. Where we process PHI on behalf of a client, requests are handled in coordination with that client.

To exercise any of these rights, contact us using the details below.

We retain information for as long as needed to provide our services, comply with legal and contractual obligations, resolve disputes, and enforce our agreements. Retention of PHI follows the terms of the applicable Business Associate Agreement and law.

If a breach of unsecured PHI occurs, we will notify affected parties in accordance with HIPAA’s Breach Notification Rule and applicable law, and support our clients in meeting their notification obligations without unreasonable delay.

Our website and services are not directed to children, and we do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. The “Last updated” date below reflects the most recent revision. Material changes will be posted on this page.