Privacy Policy

Last updated: November 3, 2026

This Privacy Policy explains how Yodl, a product of PhiClaw ("Yodl", "we", "us"), handles information collected through this website (yodl.cc) and the Yodl service. It is general information, not legal advice.

Protected health information and HIPAA

When we process protected health information (PHI) on behalf of a covered entity through the Yodl service, we do so under a signed Business Associate Agreement (BAA) and in accordance with HIPAA. Our infrastructure subprocessors are also covered by BAAs. This website is a marketing site and is not intended for PHI. Please do not send patient information through website forms or email.

Information we collect on this website

• Information you give us: your name, email, phone and company name when you contact us, book a call or buy a plan. Payments are processed by Stripe; we do not store card numbers.
• Usage data: pages viewed, referring source, device and browser type, collected with privacy-preserving analytics that do not use cross-site tracking cookies.

Information in the Yodl service

• Account data: name, email, role, workspace membership, sign-in events.
• Content: messages, files and reactions your team posts. Content is encrypted in transit and at rest and is used only to provide the service to your workspace.
• Audit data: administrative actions and access events, kept for your compliance needs and subject to your retention settings.

How we use information

• To provide, secure, maintain and improve the service and respond to requests.
• To bill you and send receipts and service notices.
• We do not sell personal information, do not use customer content for advertising, and do not train AI models on customer messages.

Sharing

We share information only with service providers that help us run the service and the business (hosting, payments, email delivery, scheduling), under contracts and, where PHI is involved, BAAs; and where required by law.

Retention and deletion

Workspace content follows the retention settings your admins choose. After cancellation, your data stays exportable for 30 days and is then deleted or anonymized, subject to legal obligations and the BAA. Website inquiry data is kept as long as needed to respond and for legitimate business purposes.

Your choices

Request access to, correction of, or deletion of your personal information by emailing [email protected]. Workspace admins control member data inside the service.

Contact

Questions about this policy: [email protected], or write to PhiClaw, Miami, Florida, USA.