Stellar Inc. ("Stellar," "we," "us") provides documentation-validation software for skilled nursing facilities. This Privacy Policy explains how we handle information for our website and our product.
This policy covers (a) visitors to our website and (b) the data our product processes when a provider authorizes our software to connect to its systems. It does not change any Business Associate Agreement (BAA) or customer contract, which govern in the event of a conflict.
Website visitors. If you contact us or join an interest list, we collect the information you provide (e.g., name, work email, organization, role) and standard technical data (e.g., IP address, browser type) via essential cookies. Please do not submit any patient information through our website forms.
Product data (provider-authorized). When a provider authorizes our software, it accesses current clinical documentation on a read-only basis through the provider's authorized data connection to evaluate documentation completeness and timeliness at the point of care. Our software is observe-only — it does not write back to the record and makes no clinical decision.
Where our software processes PHI on a provider's behalf, we act as a Business Associate under a BAA and handle PHI only as that BAA and HIPAA permit. Our software is designed to minimize and not retain identifiable PHI. No resident records are retained. We retain non-identifiable operational data.
To operate, secure, and improve the product and website; to communicate with prospective and current customers; and to meet legal and contractual obligations. We use provider-authorized clinical data solely to perform the documentation-validation service for that provider.
We do not sell personal information or PHI, and we do not use provider clinical data to train models for other customers or purposes.
We share information only with service providers/subprocessors acting on our behalf under appropriate agreements, a provider's own authorized systems, and as required by law.
We use administrative, technical, and physical safeguards appropriate to the data, including access controls, encryption in transit, and a minimize-and-don't-retain design for PHI. No method is completely secure.
Website contact data is kept only as long as needed for the purpose collected. Product operational data follows our retention standard (PHI not retained at rest). Records required by law are kept for the required period.
Our website and product are not directed to children.
Stellar Inc. · intake@stellarclinical.com