BH Growth Engine builds software for behavioral health treatment centers. We collect the minimum we need to run our website and services, we don't sell personal information, and any data a facility connects to our tools is used only to provide that facility its service. The details are below.
This Privacy Policy explains how BH Growth Engine LLC ("BHGE," "we," "us," or "our") handles information in connection with our marketing website and the software products and services we provide to behavioral health treatment centers (collectively, the "Services").
Our customers are businesses — treatment center operators — not individual consumers. Where a customer facility connects its own accounts or data to our Services, that facility is the controller of that data and we act as its service provider or processor. This policy governs our own data practices; a facility's use of our tools with its patients or clients is governed by that facility's own agreements and notices.
We use information to:
We do not use information to make automated decisions that produce legal or similarly significant effects about any individual patient, and we do not use a customer's connected-platform data for our own advertising.
Some Services help a facility manage its presence on third-party platforms such as Meta (Facebook/Instagram) and Google. When a facility authorizes a connection:
We do not sell personal information. We do not share or sell consumer personal information, including mobile phone numbers and SMS opt-in consent, with third parties or affiliates for their marketing or lead-generation purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. We share information only as follows:
A current list of sub-processors is available on request at privacy@bhgrowthengine.ai.
Our marketing website is not intended to collect protected health information, and you should not submit PHI through our forms or email.
Where a Service is designed to process PHI on behalf of a facility that is a HIPAA covered entity, we do so only as a business associate under a signed Business Associate Agreement (BAA), and we handle that PHI in accordance with the BAA and applicable law, including 42 CFR Part 2 where it applies. Absent a signed BAA, no Service should be used to transmit PHI to us.
We use strictly necessary cookies to operate the site and may use analytics cookies to understand how the site is used. [If you use Google Analytics or a similar tool, name it here and link its privacy terms; if you use no analytics, state that and delete this sentence.] You can control cookies through your browser settings. Where required by law, we will request consent before setting non-essential cookies.
We keep information only as long as needed for the purposes described in this policy, to provide the Services, to meet legal, accounting, or reporting obligations, and to resolve disputes. Inquiry and contact-form messages are retained for up to [24 months] unless a longer period is required. Customer account data is retained for the life of the account and then deleted or de-identified as described in the Data Handling & Deletion page.
Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to opt out of certain processing, and to withdraw consent. To exercise any of these, use our contact form (choose "Data access or deletion request") or email privacy@bhgrowthengine.ai. We will respond within the time required by applicable law and will not discriminate against you for exercising your rights.
If you are a patient or client of one of our customer facilities, please direct requests about your care records to that facility, which controls that data.
We use administrative, technical, and physical safeguards designed to protect information, including encryption in transit, access controls, and least-privilege handling of credentials. No system is perfectly secure, but we work to protect information and to notify affected parties and authorities of incidents as required by law.
The Services are intended for businesses and adults. We do not knowingly collect personal information from children under 13 through our website. If you believe a child has provided us information, contact us and we will delete it.
We may update this policy from time to time. Material changes will be posted here with a new effective date. Questions or requests: