Effective Date: March 30, 2026  |  Last Updated: April 4, 2026

1. Introduction

Codontix, LLC, doing business as Neuro Direct Virtual Care ("we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our telehealth platform at neurodirectcare.com (the "Service").

2. Information We Collect

Personal Information: Name, date of birth, phone number, email address, mailing address, and insurance details you provide during the intake process.

Health Information: Medical history, symptoms, diagnoses, prescriptions, and other Protected Health Information (PHI) collected during your visit. Your health information is handled in accordance with our HIPAA Notice of Privacy Practices.

Device & Usage Data: IP address, browser type, operating system, and pages visited. We use this data to improve the Service and for security purposes.

Video & Audio Data: During your telehealth visit, video and audio streams are transmitted through our video conferencing provider (Daily.co) to connect you with your physician. These streams are not recorded or stored by the platform unless you are separately informed and consent is obtained.

SMS & Phone: When you register, we send a one-time verification code via SMS to confirm your phone number. We may also send visit-related notifications such as queue status updates and rejoin links. We do not use your phone number for marketing messages.

3. How We Use Your Information

• To verify your identity and create your patient account
• To provide telehealth consultations and related clinical services
• To process payments and verify insurance eligibility
• To send appointment reminders and visit-related communications
• To comply with legal and regulatory obligations
• To improve the security and functionality of the Service

4. How We Protect Your Information

All data is encrypted in transit (TLS) and at rest (AES-256 with envelope encryption via Google Cloud KMS). Access to PHI is restricted to authorized personnel. We maintain HIPAA-compliant administrative, physical, and technical safeguards.

5. Information Sharing

We do not sell your personal information. We may share information with:

• Healthcare providers involved in your care
• Service providers who assist in operating the platform, bound by data protection agreements, including:
  • Payment processing (Stripe)
  • SMS delivery for verification and visit notifications
  • Video conferencing (Daily.co) for telehealth visits
  • Cloud infrastructure (Google Cloud Platform) for hosting and data storage
• Legal authorities when required by law or to protect the safety of our users

6. Your Rights

You have the right to access, correct, or request deletion of your personal information. For PHI-related requests, please refer to our HIPAA Notice of Privacy Practices or contact us directly.

7. Cookies

We use essential cookies required for the Service to function (e.g., session management). We do not use third-party advertising or tracking cookies.

8. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect information from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Effective Date" at the top of this page.

10. Contact Us

If you have questions about this Privacy Policy, contact us at:
support@codontix.com