Privacy Policy

At It's Time 2 ("we," "our," or "us"), we are committed to protecting the privacy and security of our healthcare practice accounts ("Customers") and their patients ("End Users"). This Privacy Policy describes how we collect, use, process, and protect personal data and healthcare notification information collected through our web application, SMS messaging dispatch services, and website.

1. Information We Collect

To provide our automated SMS messaging and patient care scheduling platform, we collect the following types of information:

• Account Credentials: Account user email addresses, encrypted passwords, and business billing information processed via Stripe.
• Patient Directory Information: Patient first names, last names, email addresses, and mobile phone numbers uploaded directly by healthcare practice administrators.
• Scheduled Message Data: Message templates, customized text bodies, dispatch schedules, and historical audit logs.
• Device & Interaction Data: IP addresses, browser types, interaction timestamps, and activity monitoring used to enforce session security and auto-logout procedures.

2. How We Use Information

We strictly process collected information to facilitate practice operations, including:

• Routing and dispatching authorized SMS notifications (such as appointment reminders, multi-date therapy follow-ups, and check-in alerts) to patients.
• Maintaining account activity history logs for audit trails.
• Managing recurring subscription billing and account limits.
• Enforcing TCPA, 10DLC carrier compliance, and application security.

3. Text Messaging & Opt-Out Protocols

Patients receiving automated text messages dispatched through It's Time 2 are subject to strict opt-in and opt-out protections:

• Opt-In Consent: Healthcare practices using It's Time 2 warrant that they have obtained explicit prior express consent from patients to receive SMS notifications regarding their care.
• Opt-Out (STOP): Patients may opt out of receiving further text messages at any time by replying STOP to any message. Upon receiving a STOP reply, our telecommunications gateway immediately blocks further dispatches to that mobile number.
• Help (HELP): Patients may reply HELP to receive practice customer support contact details.
• Message & Data Rates: Standard message and data rates may apply depending on the patient's mobile carrier plan.

4. Data Protection & Vendor Security

We employ administrative, technical, and physical safeguards to prevent unauthorized access, disclosure, or destruction of patient data:

• Encryption: All data transmitted between browsers, Vercel serverless endpoints, Supabase database storage, and Twilio SMS gateways is encrypted using TLS 1.2 / TLS 1.3 encryption.
• Session Protections: Automatic inactivity auto-logout occurs after 1 hour of user idle time to protect unattended clinical workstations.
• Access Restrictions: Database tables are secured with Row Level Security (RLS) to ensure tenant isolation between clinical practices.

5. Third-Party Service Vendors

We partner with vetted infrastructure providers to operate our platform:

• Twilio: Used as our telecommunications relay for SMS dispatches.
• Supabase: Used for secure encrypted database hosting and user authentication.
• Vercel: Used for cloud application deployment and serverless API execution.
• Stripe: Used for PCI-compliant payment processing.

6. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy periodically. Any modifications will be reflected on this page with an updated "Effective Date."

7. Contact Information

If you have questions regarding this Privacy Policy or data privacy rights, please contact us at:

It's Time 2 Privacy Team
Email: support@itstime2.net