Privacy Policy

This Privacy Policy describes how Origin Therapy, Inc. (“Origin Therapy,” “we,” “our,” or “us”) collects, uses, maintains, protects, and discloses information through our websites, web applications, mobile applications for iOS and Android, and related services (collectively, the “Services”), including the Origin provider application. We respect your privacy and are committed to protecting personal information in accordance with this Privacy Policy and applicable law.

This Privacy Policy applies to information we collect:

through our websites, web applications, and mobile applications;
when you create or use an Origin Therapy account;
when you use features of our Services, including scheduling, clinical documentation, and AI-assisted documentation tools;
in email, text messages, support requests, and other electronic communications with us; and
through integrations and service providers used to provide the Services.

This Privacy Policy does not apply to third-party websites or services that operate independently of Origin Therapy and maintain their own privacy policies, except as described in this Privacy Policy with respect to service providers that process information on our behalf.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Services. By accessing or using our Services, you agree to this Privacy Policy. This Privacy Policy may change from time to time (see below Changes to Our Privacy Policy). Your continued use of our Services after we make changes is deemed to be acceptance of those changes, so please check this Privacy Policy periodically for updates.

Information We Collect About You

Depending on how you interact with the Services, we may collect the following categories of information:

Account and contact information, such as your name, email address, telephone number, account credentials, professional role, and other profile information.
Provider and professional information, such as practice information, professional credentials, specialty, availability, and information necessary to provide provider-facing functionality.
Patient and clinical information, such as patient identifiers, appointment information, clinical documentation, treatment-related information, and other information entered into or accessed through the Services by authorized users.
Calendar and scheduling information, including appointments, availability, and calendar information that you choose to connect to or manage through the Services.
Audio, transcripts, and documentation information, when you choose to use recording, transcription, dictation, or AI-assisted documentation features.
Communications, including messages, support requests, feedback, and correspondence with us.
Device and technical information, such as device type, operating system, application version, IP address, diagnostic information, and information about how the Services are used.
Notification information, such as device push-notification tokens and notification preferences.

Some information processed through the Services may constitute sensitive personal information or health information under applicable law.

We refer to this information collectively as “Personal Data” in this Privacy Policy.

How We Collect Information About You

We collect information directly from you when you provide it to us, through your use of the Services, from devices and operating systems when you grant applicable permissions, from organizations or users authorized to provide information to us, and from service providers and integrations used to operate the Services.

The information we collect on or through our Website provided by you may include:

information that you provide by filling in forms on our Website. This includes information provided at the time of completing a questionnaire or form, or requesting further services;
records and copies of your correspondence (including email addresses), if you contact us;
your responses to surveys that we might ask you to complete.

We may also collect information about you, including Personal Data, automatically. The information we collect automatically may include personally identifiable information or we may maintain it or associate it with personally identifiable information we collect in other ways or receive from third parties. It helps us to improve our Website and to deliver a better and more personalized service by enabling us to:

estimate our audience size and usage patterns;
verify your location to ensure we can provide you with our services;
store information about your preferences, allowing us to customize our Website according to your individual interests;
recognize you when you return to our Website.

The technologies we use for this automatic data collection may include:

Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer or mobile device. On your computer, you may refuse to accept browser cookies by activating the appropriate setting on your browser, and you may have similar capabilities on your mobile device in the preferences for your operating system or browser. However, if you select this setting you may be unable to access certain parts of our Website. Unless you have adjusted your browser or operating system setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Website.
Web Beacons. Pages of our Website and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those pages, used those screens, or opened an email and for other related Website statistics (for example, recording the popularity of certain Website content and verifying system and server integrity).
Google Analytics. We use Google Analytics, a web analytics service provided by Google, Inc. (“Google”) to collect certain information relating to your use of the Website. Google Analytics uses “cookies”, which are text files placed on your computer, to help the Website analyze how users use the site. You can find out more about how Google uses data when you visit our Website by visiting “How Google uses data when you use our partners’ sites or apps”, (located at www.google.com/policies/privacy/partners/). For more information regarding Google Analytics please visit Google’s website, and pages that describe Google Analytics, such as www.google.com/analytics/learn/privacy.html.
Google Adwords. We may also use Google AdWords or other advertising networks to provide you with interest-based advertising based on your online activity.

Mobile Application Permissions and Device Access

Our mobile applications may request access to certain device features when necessary to provide functionality you choose to use. Depending on the features available in the application, these may include:

Microphone access to record audio for dictation, transcription, or AI-assisted documentation when initiated by the user.
Calendar access to display, create, or synchronize scheduling information when the user enables calendar functionality.
Notifications to provide appointment reminders, application alerts, or other service-related communications.

We request device permissions when needed for a feature and use information obtained through those permissions for the purposes described at the time permission is requested and in this Privacy Policy. You can manage device permissions through your device settings.

How We Use Your Information

We use information that we collect about you or that you provide to us, including any Personal Data:

to provide the Services to you;
to communicate with you about our products and services;
to send newsletters, advertisements, or other promotional materials to you regarding our products and services;
to provide you with information, products or services you request from us;

to administer quizzes, surveys, and polls;
to contact you in response to a request;
to carry out our obligations and enforce our rights arising from any contracts entered into between you and us;
to enforce our rights arising from contracts or our intellectual property rights;
to notify you about changes to our Website or any of our products and services;
to authenticate users and maintain accounts;
to provide scheduling, calendar, and appointment-management functionality;
to enable recording, transcription, dictation, and AI-assisted clinical documentation features requested by users;
to create, store, retrieve, and synchronize clinical documentation and other information used to provide the Services;
to send transactional and service-related notifications;
to operate, maintain, secure, troubleshoot, and improve the Services;
to detect, investigate, and prevent fraud, misuse, security incidents, and technical problems;
to comply with applicable legal, regulatory, and contractual obligations;
in any other way we may describe when you provide the information;
to fulfill any other purpose for which you provide it;
for any other purpose with your consent.

Disclosure of Your Information

We do not share, sell, or otherwise disclose your Personal Data for purposes other than those outlined in this Privacy Policy.

We do not sell patient clinical information or use patient clinical information, audio recordings, transcripts, or clinical documentation for advertising, marketing, or other use-based data mining. We disclose information to service providers only as necessary to provide, secure, support, and improve the Services, subject to appropriate contractual and legal requirements.

Service providers that process Personal Data on our behalf include cloud hosting and data storage providers, speech-to-text and AI-assisted documentation providers, communications providers that deliver our email, text messages, and notifications, analytics and error-monitoring providers, payment processors, and insurance billing and eligibility services. When you use recording, transcription, or AI-assisted documentation features, audio and transcripts are processed by these providers to produce the documentation you request. We require every service provider, and any affiliate or related entity that has access to Personal Data, to protect it in a manner at least as protective as this Privacy Policy and applicable law, including through business associate agreements where required by HIPAA.

We may disclose your Personal Data:

to our contractors and third-party service providers that we use to support our business;
to a company we merge, acquire, or that buys us, or in the event of change in structure of our company of any form, such as a sale or transfer of some of all of our assets, or a bankruptcy, liquidation or similar proceeding;
to enforce or apply our and other agreements, including for billing and collection purposes;
with advertising or marketing partners in connection with our Website and marketing activities, where permitted by law; this does not include patient clinical information or other protected health information processed through the Services, and it never includes mobile phone numbers or text messaging opt-in data and consent;
to comply with our legal obligations;
if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of us, our customers, or others (including without limitation exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction);
to enforce our rights;
to resolve any potential fraud or perceived irregularity in any audits of the accuracy of any documentation or information submitted to us by you or on your behalf, as deemed appropriate by us;
to comply with any court order, law, or legal process, including to respond to any government or regulatory request;
to fulfill the purposes for which you provide it;
for any purpose disclosed by us when you provide the information; and
with your consent.

We may also disclose aggregated information about our users, and information that does not identify any individual, without restriction.

Choices About How We Use and Disclose Your Information

The advertising and website-tracking choices described in this section relate to our public Website and marketing activities. We do not use patient clinical information collected through the Services for interest-based or targeted advertising.

We offer you choices on how you can opt out of our use of tracking technology, disclosure of your Personal Data for our advertising to you, and other targeted advertising.

We do not control the collection and use of your information collected by third parties described above in Disclosure of Your Information. These third parties may, however, aggregate the information they collect with information from their other customers for their own purposes.

In addition, we strive to provide you with choices regarding the Personal Data you provide to us. We have created mechanisms to provide you with control over your Personal Data:

Tracking Technologies and Advertising. You can set your browser or operating to refuse all or some cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of our Website may then be inaccessible or not function properly.
Promotional Offers from Us. If you do not wish to have us use your email address to promote our products and services, you can opt-out at any time by clicking the unsubscribe link in any promotional email or by contacting us at support@origintherapy.com. This opt out does not apply to information provided to us as a result of your purchase or use of our products and services.
Disclosure of Your Information to Affiliates and Third Parties. We may share information collected through our public Website and marketing activities with affiliates and marketing partners for promotional purposes where permitted by law. This does not include patient clinical information, audio recordings, transcripts, clinical documentation, or other protected health information processed through the Services. This never includes mobile phone numbers or text messaging opt-in data and consent. You may opt out of promotional communications by using the unsubscribe link in the applicable communication.
Targeted Advertising. We belong to ad networks that may use your browsing activity across participating websites to show you interest-based advertisements on those websites. To learn more about interest-based advertisements and your opt-out rights and options, visit the Digital Advertising Alliance and the Network Advertising Initiative websites (www.aboutads.info and www.networkadvertising.org). Please note that if you choose to opt out, you will continue to see ads, but they will not be based on your online activity. We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can also opt out of receiving targeted ads from members of the NAI on its website.
Withdrawing Consent. You can withdraw consent you have given us at any time. You can turn off device permissions such as microphone, calendar, and notifications in your device settings; reply STOP to any text message to stop text messages; use the unsubscribe link in any promotional email; and request deletion of your account and Personal Data as described in Data Retention and Deletion below. Withdrawing consent does not affect processing that occurred before you withdrew it, and some processing may continue where required by law or to maintain required healthcare records.

Promotions for Our Products and Services

We may use your Personal Data to contact you about products and services that may be of interest to you, including through newsletters. If you wish to opt-out of receiving such communications, you may do so at any time by following the instructions within the email to unsubscribe or manage your preferences. For more information, see Choices About How We Use and Disclose Your Information.

Advertising Partners

We may use how you browse in order to show you ads for our advertising partners that are more relevant to your interests. We may use cookies and other information to provide relevant interest-based advertising to you. Interest-based ads are ads presented to you based on your browsing behavior in order to provide you with ads more tailored to your interests. These interest-based ads may be presented to you while you are browsing our Website or third party sites we do not own.

Links To Other Websites

Our Website contains links to other websites that have information we believe may be of interest. We do not endorse these sites. While we try to link only to websites that share our high standards and respect for privacy, we are not responsible for the content of the sites or privacy practices employed by other sites. We encourage you to read the privacy policy of each site you visit that may collect information or ask you to disclose Personal Data. This Privacy Policy does not apply to information collected on external websites that may be linked to or through the Site.

Text Messaging

If you opt in on our intake form, Origin Therapy and your child’s therapist may text you about intake, scheduling, appointment reminders, provider matching, insurance follow-up, and care coordination. Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help. Consent to text messages is not a condition of receiving care from Origin Therapy. For more information, see the Text Messaging Terms in our Terms of Use or email support@origintherapy.com.

No mobile information will be shared with or sold to third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are excluded from all other sharing described in this Privacy Policy and will not be shared with or sold to any third parties.

Correcting Your Information

You may notify us through the Contact Information below of any changes or errors in any Personal Data we have about you to ensure that it is complete, accurate, and as current as possible or to delete your Personal Data. We may also not be able to accommodate your request if we believe it would violate any law or legal requirement or cause the information to be incorrect.

Do Not Track Signals

We also may use automated data collection technologies to collect information about your online activities over time and across third party websites or other online services (behavioral tracking). Some web browsers permit you to broadcast a signal to websites and online services indicating a preference that they “do not track” your online activities. At this time, we do not honor such signals and we do not modify what information we collect or how we use that information based upon whether such signal is broadcast or received.

Data Retention and Deletion

We retain Personal Data for as long as reasonably necessary to provide the Services, fulfill the purposes described in this Privacy Policy, comply with our legal and contractual obligations, resolve disputes, maintain appropriate business and clinical records, and enforce our agreements.

Retention periods may vary depending on the type of information and the purposes for which it is processed. Certain clinical, billing, regulatory, or other records may need to be retained for periods required by applicable law or contractual obligations even after an account is closed.

You may request access to, correction of, or deletion of your Personal Data, including deletion of your account, at any time. Origin Provider app users can request account deletion at https://origintherapy.com/support#delete-account or by emailing support@origintherapy.com from the email address on the account. All other users can email support@origintherapy.com. We will confirm the request, process it in accordance with applicable law, and notify you by email when it is complete. When we delete an account, we delete the login, profile, contact details, notification settings, and any calendar connection associated with it. Some information is not eligible for deletion when retention is required or permitted by law, necessary to protect the rights or safety of others, or necessary to maintain required healthcare, billing, or business records. We retain that information only for as long as those requirements apply and continue to protect it under this Privacy Policy.

Data Security

We maintain administrative, technical, and physical safeguards designed to protect Personal Data against accidental or unlawful loss, access, use, alteration, or disclosure. These safeguards include encryption of Personal Data in transit and access controls that limit access to authorized users. We apply safeguards appropriate to the nature and sensitivity of the information processed through the Services. However, no method of electronic transmission or storage can be guaranteed to be completely secure.

Your California Privacy Rights

Under some circumstances, California law may provide you with the right to obtain a list of third parties (if any) that we provide your Personal Data to for their own direct marketing purposes.

California Civil Code Section 1798.83 (California’s “Shine the Light” law) permits users of our Website that are California residents and who provide Personal Data in obtaining products and services for personal, family, or household use to request certain information regarding our disclosure of Personal Data to third parties for their own direct marketing purposes. If applicable, this information would include the categories of Personal Data and the names and addresses of those businesses with which we shared your Personal Data with for the preceding calendar year (e.g., requests made in 2020 will receive information regarding such activities in 2019). You may request this information once per calendar year. To make such a request, please send an email by using the Contact Information below.

Information About Children

Origin Therapy provides pediatric therapy services, and the Services may therefore process information about children in connection with their care. Such information may be provided by a parent or legal guardian, an authorized healthcare provider, or another person authorized to provide or access the information.

The Origin provider application is intended for authorized providers and other authorized adult users and is not intended for children to create or independently manage provider accounts.

We handle information about children in accordance with applicable privacy and healthcare laws and our contractual obligations. Parents, legal guardians, and other authorized individuals may contact us using the information below with questions regarding information about a child, subject to applicable legal and healthcare-record requirements.

Storage of Personal Data in the United States

All of the information that you provide to us will be stored and processed in the United States. While you may access our Services from a location outside of the United States, you agree not to transfer any of your information to us from outside the United States. The laws in the United States may not offer the same degree of privacy protection as the laws in your jurisdiction.

Changes to Our Privacy Policy

We may change this Privacy Policy at any time. We will post any changes on this page and update the effective date below. If we make material changes to how we treat Personal Data, we will notify you through the Services, by email to the address you have provided to us, or through a notice on our Website. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically reviewing this Privacy Policy to check for any changes.

Contact Information

For questions about this Privacy Policy, our mobile applications, privacy choices, or requests regarding your Personal Data, contact us at the contact information below.

How to Contact Us:

Email: support@origintherapy.com

Effective date: September 29, 2026