Stillpoint

Legal and privacy

The agreements behind Stillpoint, plain answers to the questions people ask most, and a dated record of every change.

Try
I’m here as

Quick answers

Each answer links to the clause it comes from. The clause is what applies.

  • Do you sell our data or use it for advertising?

    We don’t sell data. The only advertising use is measuring whether our own ads lead to sign-ups, with the Meta Pixel and Google Analytics on our own website. Nothing from your practice or your clients’ records is used.

    §4Privacy Policy, Cookies and authentication

  • Where is our data stored?

    On Amazon Web Services in the United States (us-east-1, N. Virginia), encrypted with AES-256 at rest and TLS in transit.

    §9Privacy Policy, Data security

  • Will you sign a Business Associate Agreement?

    Yes. A US practice accepts our BAA when it turns on HIPAA mode. Practices in the UK, Australia, and New Zealand are covered by our Data Processing Agreement automatically.

    Data Processing Agreement

  • How long do you keep AI Scribe recordings?

    By default, audio is deleted when the note is signed, or 7 days after recording if it never is. Your practice can choose 7 or 30 days after recording instead. Transcripts are deleted 90 days after signing; one shared to the client’s portal is kept a year from when it was last shared or withdrawn.

    §8Privacy Policy, AI features and clinical data

  • Can we export our data and leave?

    Yes. Export client records and clinical notes from practice settings at any time, and close your account whenever you like.

    §11Privacy Policy, Your rights (practitioners)

  • Who else handles our data?

    A short, published list led by AWS. Material changes are emailed to practice owners at least 14 days before they take effect.

    §1Sub-processors, Core infrastructure

Documents

Everything that governs your use of Stillpoint, in one place.

Recent changes

Each change is dated. Sub-processor changes are emailed to practice owners 14 days ahead.

  1. Terms of Service. AI Scribe retention now matches what the product does, and claims you submit through Stillpoint go through Stedi, reaching the payer once your enrollment with that payer is active. Dashes became parentheses in three places, with no change in meaning.

    See what changed: Terms of Service

  2. Privacy Policy. AI Scribe audio retention now reads the same everywhere and a shared transcript is kept a year from when it was last shared or withdrawn. Discloses the Meta Pixel, which measures our own ads, and that Google Analytics covers our sign-up and practice setup pages. The vendor list adds claim submission through Stedi, Google Sign-In, and Meta. Dashes became parentheses in two places, with no change in meaning.

    See what changed: Privacy Policy

  3. Sub-processors. Removed OpenAI and AWS End User Messaging, which Stillpoint no longer uses, and listed Google (address autocomplete and web fonts) and Microsoft Outlook calendar sync, which were already in use.

    See what changed: Sub-processors

  4. Privacy Policy. AI Scribe retention rewritten (audio deleted at signing, transcripts after 90 days, shared transcripts kept a year), and data held in the United States may be accessible to US authorities.

  5. Terms of Service, Privacy Policy, and Data Processing Agreement. Named the contracting entity: 1581572 B.C. Ltd. d/b/a Stillpoint Technologies.

  6. Privacy Policy. Linked the new sub-processor list and the Data Processing Agreement.

Questions about any of this?

Write to us and a person answers. We respond to verified data requests within 30 days.

1581572 B.C. Ltd. d/b/a Stillpoint Technologies
PO Box 5121, Victoria PO 9, BC V8R 6N4, Canada
help@withstillpoint.com