About Ayra and InQuantic
Ayra Desk is software for ABA and speech therapy practices that helps their staff move referrals to a first therapy session. Ayra Desk is a product of InQuantic Technologies, Inc. (“InQuantic”, “we”, “us” or “our”). Ayra is our brand name.
Scope of this policy
This Privacy Policy explains how we collect, use, share and protect personal information when you:
- visit this website or other websites that link to this policy (the “Site”);
- contact us, request a workflow review, or apply to be a design partner or pilot clinic; or
- use Ayra Desk as a staff member of a clinic that is our customer (the “Services”), for account and usage information that isn’t PHI.
What this policy doesn’t cover
This policy also doesn’t cover third-party websites or services we link to, or the practice management systems clinics use alongside Ayra Desk.
1. Information we collect
1.1 Information you give us
- Contact and business details, such as your name, work email, phone number, practice name, role, the therapies your practice offers and its number of locations, when you fill in a form, email us or book a call.
- Communications, such as the content of your messages and notes from calls with our team.
- Account details, such as your name, work email, role and login information, if your clinic gives you an Ayra Desk account.
Please don’t send patient information through our website forms or general email. Those channels aren’t covered by a BAA.
1.2 Information collected automatically
When you visit the Site, we and our service providers may collect device and usage information, such as IP address, browser type, pages viewed, referring pages, and the date and time of your visit. In the Services, we log account activity, such as sign-ins and actions taken, for security, audit and support.
1.3 Cookies and similar technologies
We use cookies and similar technologies as described in section 6.
1.4 Information from other sources
We may receive business contact information from event organizers, referral partners and public professional sources, such as a practice’s website.
1.5 Message data in the Services
When a clinic uses Ayra Desk to text families, we process message content, phone numbers and consent records on the clinic’s behalf. This is PHI handled under our business associate agreement with the clinic, as described above.
2. How we use information
We use the information in section 1 (other than PHI) to:
- respond to your requests, schedule workflow reviews and evaluate design-partner and pilot applications;
- provide, secure, support and improve the Site and the Services;
- send you information about Ayra Desk that you asked for and, where the law allows, occasional product updates you can opt out of at any time;
- detect, prevent and investigate fraud, abuse and security incidents;
- comply with the law and enforce our agreements.
We use PHI only as our business associate agreements allow, to provide the Services to the clinic that sent it. We never use PHI for marketing or advertising.
Legal bases (EEA, UK and similar jurisdictions)
The Site is meant for US therapy practices. If laws such as the GDPR apply to you, we rely on these legal bases: performing a contract with you or taking steps at your request before one; our legitimate interests in running and promoting our business, balanced against your rights; your consent, where we ask for it; and compliance with legal obligations.
3. How we share information
We don’t sell personal information, and we don’t share it for cross-context behavioral advertising. We share information only:
- With service providers that host, secure, support or help us run the Site and the Services, under contracts that limit their use of the information. Service providers that handle PHI sign business associate agreements with us.
- With the clinic you work for, for account and activity information in its Ayra Desk workspace.
- For legal reasons, when we believe disclosure is required by law, subpoena or court order, or is needed to protect the rights, property or safety of InQuantic, our customers, families or others.
- In a business transfer, such as a merger, acquisition or sale of assets, subject to this policy and to our business associate agreements.
- With your consent or at your direction.
3.1 Text messaging data
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.
4. Where information is processed
We are based in the United States and process information in the United States. If you contact us from another country, your information will be transferred to and processed in the United States.
5. Security and retention
We use administrative, physical and technical safeguards designed to protect personal information, including encryption in transit and at rest and role-based access controls. You can read more on our HIPAA and Security page. No method of transmission or storage is completely secure, and we can’t guarantee absolute security.
We keep personal information only as long as we need it for the purposes in this policy or as the law requires. As a guide:
- Inquiries and workflow-review requests: up to 24 months after our last contact with you.
- Staff account information and activity logs: while your clinic’s account is active, and then as our customer agreement and the law require.
- PHI: kept, and then returned or deleted, as our business associate agreements require.
6. Cookies and analytics
The Site currently uses no analytics or advertising cookies. It loads fonts from Google Fonts, which means your browser sends your IP address to Google when you visit. If we add analytics or other non-essential cookies, we will update this policy first and ask for your consent where the law requires.
Do Not Track. Because the Site doesn’t track you across other websites, it doesn’t change its behavior in response to browser Do Not Track signals. Where the law requires, we treat Global Privacy Control signals as a request to opt out of sale or sharing.
7. Your rights and choices
- Emails. You can unsubscribe from updates using the link in any email, or by writing to us. We may still send messages about your requests or your account.
- Access, correction and deletion. You can ask to see, correct or delete personal information we hold about you by writing to privacy@meetayra.com. We will verify your request before acting on it.
- Patient information. Requests about a child’s or family’s health information should go to the clinic, which controls that information. We will help the clinic respond.
8. US state privacy rights
Depending on where you live, and to the extent these laws apply to us, laws such as the California Consumer Privacy Act may give you rights to know what personal information we collect, use and disclose; to access, correct or delete it; to opt out of its sale or sharing for targeted advertising; and not to be discriminated against for using these rights. We don’t sell or share personal information as those laws define it, and we don’t use sensitive personal information to infer characteristics about you.
To use these rights, email privacy@meetayra.com. You may use an authorized agent, and you may appeal a decision by replying to our response. PHI that we handle as a business associate is governed by HIPAA and is generally exempt from these state laws.
9. Children’s privacy
The Site is meant for therapy practices and their staff, not for children, and we don’t knowingly collect personal information from children under 13 through the Site. Ayra Desk does process information about children who are referred for therapy. It does so only on behalf of the child’s clinic, under a business associate agreement, and from the clinic, the referring provider or the child’s parent or guardian. If you believe a child has given us personal information through the Site, please contact us and we will delete it.
10. Third-party sites
The Site may link to other websites and services. Their privacy practices are their own, and we encourage you to read their policies.
11. Changes to this policy
We may update this policy from time to time. We will change the “Last updated” date above and, for material changes, give notice on the Site or by email where appropriate.
12. Contact us
InQuantic Technologies, Inc.
Attn: Privacy
[Mailing address]
Email: privacy@meetayra.com