Privacy Center
At ZenaRCM, protecting your data is fundamental to everything we do. This policy explains how we collect, use, and safeguard your information.
Last updated: March 2026
Information We Collect
We collect information you provide directly to us, including name, email address, phone number, and practice details when you request a free audit or contact us. We also collect Protected Health Information (PHI) as necessary to provide revenue cycle management services, in accordance with HIPAA regulations.
How We Protect Your Data
ZenaRCM implements industry-leading security measures including 256-bit encryption, secure data centers, role-based access controls, and regular security audits. All PHI is stored and transmitted in accordance with HIPAA Security Rule requirements. We maintain SOC 2 Type II certification.
How We Use Information
We use collected information to provide revenue cycle management services, communicate with you about our services, improve our operations, and comply with legal obligations. We never sell your personal information to third parties.
Information Sharing
We share information only as necessary to provide our services, including with healthcare payers, clearinghouses, and as required by law. All business associates sign BAAs (Business Associate Agreements) as required by HIPAA.
Your Rights
You have the right to access, correct, or delete your personal information. For PHI, you have additional rights under HIPAA including the right to receive an accounting of disclosures and to request restrictions on certain uses. Contact our Privacy Officer to exercise these rights.
Data Retention
We retain information as necessary to provide services and comply with legal requirements. Medical billing records are retained for a minimum of 7 years as required by healthcare regulations. You may request deletion of non-essential data at any time.
Privacy Questions?
Contact our Privacy Officer for any questions about your data or to exercise your privacy rights.
privacy@zenarcm.com