Privacy Policy

Privacy Policy

This Privacy Policy governs the confidentiality, retention, and protection of information in the Advance Recovery & Client Success and Management System (ARCSAMS or the Platform) operated by Advance (Advance, we, us, or our), including records protected by HIPAA and 42 CFR Part 2.

1. Scope and Sensitive Records

The Platform contains protected health information and substance use disorder records. All collection, storage, use, and disclosure of Data is governed by HIPAA, 42 CFR Part 2, and all other applicable privacy, security, and confidentiality laws.

Where 42 CFR Part 2 applies, it is more restrictive than HIPAA and takes precedence. Information disclosed from records protected by 42 CFR Part 2 may not be redisclosed without the additional consent required by those rules, except as those rules otherwise allow.

These confidentiality obligations survive termination of your access to the Platform.

2. Restrictions on Disclosure

You may not disclose Platform Data except as authorized by the Individual (or a Related Individual), required or permitted by law, or expressly directed by Advance. Access is limited to the minimum information necessary to perform your assigned duties.

3. Data Sharing

Advance does not sell, trade, or share Data with third-party advertisers.

4. Retention

Data is retained for up to ten (10) years, or in accordance with HIPAA and 42 CFR Part 2 requirements, whichever period is greater. Retention is not limited to the period during which a User account is active.

5. Monitoring and Audit

Advance logs access to and activity on the Platform for security, quality, and compliance purposes. You have no expectation of privacy in Platform use, except as required by law.

6. Account Authentication Privacy

Sign-in to the Platform uses third-party identity providers. When you sign in, those providers collect and process your sign-in profile information, such as your name, email address, and profile image, to authenticate your account. Advance receives and uses this profile information only to create and administer your User account and to secure access to the Platform.

Advance does not use sign-in profile information for advertising, marketing, or any purpose unrelated to Platform access.

7. Changes

Advance may update this Privacy Policy from time to time. The “Last updated” date will change when revisions are posted. Continued use of the Platform after an update constitutes acceptance of the revised Privacy Policy.

8. Contact

Questions about this Privacy Policy should be directed to the ARCSAMS administration team or your supervisor.