After Hours PrimePrivacy Policy & HIPAA Notice
Effective Date: October 1, 2026 • Last Reviewed: November 1, 2026 • Headquarters: Austin, Texas, USA
At After Hours Prime ("Company", "we", "us", or "our"), safeguarding the confidential data of our partner aesthetic clinics, MedSpas, plastic surgery centers, and their prospective patients is paramount. This Privacy Policy details our data stewardship principles, adherence to the Texas Data Privacy and Security Act (TDPSA), and HIPAA Security Rule triage standards.
1. Data Collection & Triage Scope
Our conversational systems strictly collect the administrative information required to qualify a prospective aesthetic patient inquiry:
- Contact Information: Caller/visitor name, telephone number, and email address.
- Treatment Interest: Desired aesthetic category (e.g., Neuromodulators/Botox, Dermal Fillers, Morpheus8 RF, Biostimulators, Laser Skin Resurfacing).
- Scheduling Preference: Preferred consultation days and appointment times for calendar synchronization.
- Excluded Data: We do not request, process, or store credit card numbers, Social Security Numbers, or comprehensive electronic medical records (EMR/EHR) charts over telephone triage channels.
2. Clinical Safety & HIPAA Triage Boundaries
Front-Desk Triage Focus: After Hours Prime is engineered to execute appointment intake, qualify consultation investment intent, and route inquiries into clinic scheduling software (Boulevard, Zenoti, Aesthetic Record, Vagaro). The AI never provides medical diagnoses, pharmacological advice, or prognosis.
*Note: Standard deployment covers front-desk triage, treatment inquiries, and appointment scheduling. If we need or if your clinic requires formal BAA execution and full HIPAA compliance, we will add and configure dedicated HIPAA protocols upon request.
3. Zero Data Commercialization Guarantee
We maintain an absolute zero-sale policy: We do not sell, rent, monetize, or broker patient inquiries or clinic data to any third party, advertising network, or data aggregator. All captured inquiries belong exclusively to the client clinic whose concierge line was contacted.
4. Technical Safeguards & Cloudflare Edge Architecture
Our technical infrastructure utilizes industry-leading defense-in-depth measures:
- Transport Security: Mandatory TLS 1.3 encryption with HTTP Strict Transport Security (HSTS) with 1-year preload header.
- Storage Encryption: Isolated Cloudflare D1 encrypted database clusters with AES-256 bit encryption at rest.
- Geographic Boundary Enforcement: Cloudflare Edge geo-filtering ensuring all processing complies with United States healthcare privacy mandates.
5. Compliance Officer & Privacy Contact
Privacy & Compliance Officer: Founder of After Hours Prime
Commercial Entity: After Hours Prime
Headquarters: 100 Congress Avenue, Suite 2000, Austin, Texas 78701, United States
Official Telephone: +1 (512) 890-5238 / +1 (346) 325-2382
Direct Privacy Email: [email protected]