Privacy Policy

Apex Flow Revenue Cycle Solutions LLC, a Florida limited liability company ("Apex Flow," "we," "us," or "our") · Website: apexflowrcm.com · Effective date: July 2, 2026

This Privacy Policy explains what information Apex Flow collects through its public website (apexflowrcm.com), how we use it, and the choices you have. This policy covers the website only; it does not describe how we handle protected health information (PHI) for billing clients, which is governed separately by a signed Business Associate Agreement (BAA) and client services agreement, not by this page.

1. Information we collect

Apex Flow's website is a business-to-business (B2B) informational site for medical practices. The only personal information we collect through the site is what a visitor voluntarily submits through our forms (the homepage "Get your audit" form and the "Free Denial & A/R Exposure Check" funnel). Depending on which form is used, that may include:

• Practice / business name
• Your name
• Work email address
• Phone number (optional)
• Medical specialty (selected from a list, e.g., pain management, orthopedics)
• State (homepage form) or an approximate monthly insurance-billing volume band (exposure-check funnel)
• Selected "pain points" (e.g., prior-authorization denials, timely filing) on the exposure-check funnel only
• An optional free-text message describing what you'd like us to know

We also automatically receive standard technical information any website receives when a form is submitted (e.g., timestamp, and information your browser sends as part of the request). Both forms include a hidden "honeypot" field used only for spam-bot filtering; it is not intended to collect information from human visitors.

Forms are hosted and processed by Netlify Forms, the service provider that hosts this website; Netlify processes form submissions only on our behalf. Submissions are also routed to billing@apexflowrcm.com so our team can respond.

2. No patient information collected through this website

When Apex Flow performs an actual denial/A/R analysis for a practice, that work involves real claim data. That data is never handled through the website or these forms (see how claim files actually move). It is handled only:

• under a signed Business Associate Agreement (BAA) between the practice and Apex Flow;
• after a mutual Non-Disclosure Agreement (NDA) where applicable;
• de-identified in line with the HIPAA Safe Harbor method (45 CFR §164.514) where de-identification is used; and
• on secure, access-controlled systems separate from the public website.

If a visitor submits patient information through a website form despite this notice, we will not use it for any purpose other than flagging it for deletion; we will delete it promptly upon discovery and evaluate any notification obligations that apply under law. If you believe you submitted patient information in error, please tell us at billing@apexflowrcm.com so we can remove it.

3. How we use information

We use the information submitted through our forms only to:

• respond to your inquiry;
• prepare and deliver the free denial-cost check / audit findings you requested;
• follow up about Apex Flow's services, including scheduling a call or audit; and
• maintain basic business records of inbound inquiries.

We do not use this information to make any decision about an individual patient, and we do not use it for automated profiling that produces legal or similarly significant effects.

4. Sharing / disclosure

Apex Flow does not sell or rent personal information submitted through this website.

We may share information only with:

• Service providers who help us operate the site and respond to inquiries (for example, our website/forms host Netlify, our email provider, and our scheduling tool), solely to provide those services on our behalf;
• Professional advisors (e.g., attorney, accountant) where necessary; and
• Legal/compliance reasons: if required by law, subpoena, or valid legal process, or to protect the rights, property, or safety of Apex Flow or others.

We do not share website-form information with data brokers or use it for third-party advertising.

5. Security

We use reasonable administrative and technical safeguards designed to protect information submitted through the website, appropriate to the nature of that information (standard business contact details, not health data). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

If we learn of a security incident affecting personal information submitted through this website, we will investigate and provide any notifications required by applicable law.

6. Your choices & rights

You may ask us to access, correct, or delete the contact information you submitted through our website at any time by emailing billing@apexflowrcm.com. We will honor reasonable requests promptly. This does not affect information you have separately provided to us under a signed client agreement or BAA, which is governed by that agreement.

7. Cookies & analytics

This website is a static site hosted on Netlify. It does not use advertising cookies, cross-site tracking cookies, or third-party analytics scripts. Netlify Forms uses minimal technical mechanisms (such as the hidden honeypot form field described above) to help detect spam submissions; this is not used to track visitors across other websites. Page fonts are loaded from Google Fonts, which receives the standard technical request data (such as your IP address) needed to deliver the font files. If we ever add an analytics tool, we will update this section first.

8. Children's privacy

This website is intended for business use by medical practices and healthcare professionals. It is not directed to children, and we do not knowingly collect personal information from children under 13.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date at the top of this page. Continued use of the website after changes are posted constitutes acceptance of the updated policy.

10. Contact

Questions about this Privacy Policy, or a request to access, correct, or delete your information:

Effective date: July 2, 2026 · See also our Terms of Service and Business Associate Agreement page.