Legal
Privacy
Last updated 2026-07-19.
Draft pending legal review. This page describes how the product actually behaves and is accurate to the best of our knowledge, but it has not yet been finalised by counsel. It will be replaced before general availability.
What is in a packet
An intake packet contains what you put in it: your name, date of birth, contact details, insurance information and optionally a photo of your card, the reason for your visit, any referral note or order, and your signed consent to share it. You assemble it, you review it, and nothing is sent anywhere until you ask for a call.
Why we process it
To do the thing you asked for: contact a clinic on your behalf, book an appointment, and deliver your details to that clinic. The legal basis is your explicit, recorded consent, captured before any disclosure.
Who sees it
The clinic you chose, and only after a staff member has entered the one-time code and completed the read-back verification. We do not sell, rent, or broker your information, and we do not use it for advertising.
We use service providers to run the product — cloud hosting, telephony, and speech and language processing. Providers that handle health information do so under business associate agreements.
Calls
The assistant discloses that it is an AI at the start of every call. We retain call events and redacted transcripts to support the audit record. Our current position is not to retain call audio recordings.
The audit record
Every disclosure, view, and download is written to an append-only, tamper-evident log with device and network metadata. This record exists to protect you: it is how we can say exactly what a clinic saw and when. Because it is a security record it is retained beyond the life of the packet itself, and entries cannot be edited or deleted.
Retention
Encrypted packet payloads are short-lived by design — they exist for the transfer and are removed afterwards. Your account and saved profile persist until you delete them. Audit entries are retained as described above.
Cookies and analytics
This website stores nothing on your device unless you agree to it. If we enable analytics, it is opt-in, off by default, and you can change or withdraw your choice at any time using the Cookie preferences link in the footer of every page. We do not run advertising or cross-site tracking anywhere on our sites.
The clinic-facing receive page sets no cookies and loads no third-party code at all.
Your rights
You can access, correct, export, or delete your information, and withdraw consent for future disclosures. Withdrawing consent does not retract a disclosure already made — but the audit record will show precisely what it was.
To exercise any of this, write to support@receivepin.com.
Clinics
A practice can ask never to be called by our assistant. See how to request that; we honour it permanently.
Contact
Privacy questions go to support@receivepin.com; security matters to security@receivepin.com.