SunshynOPERATIONS

Privacy Policy

Last updated: October 2, 2026

This Privacy Policy describes how Sunshyn Credentialing & Medical Billing Group (“Sunshyn,” “we,” “us,” or “our”) collects, uses, and shares information when you use Sunshyn Operations, including the Team Hub, credentialing intake, billing support requests, hourly help booking, and related sign-in services, and our provider SMS/MMS messaging program (together, the “Services”).

Who this applies to

This policy covers workforce collaborators, administrators, and people who submit public request forms (for example credentialing or billing intake), as well as provider messaging participants. It does not replace a Business Associate Agreement (BAA) or other contract that may apply to protected health information (PHI) in a client engagement.

Information we collect

  • Account and identity. Name, email address, role or group membership, and authentication details when you sign in with email/password or Google through Amazon Cognito.
  • Professional and organizational details. Practice or provider names, organizations, NPI, contact information, and other data you submit on intake or profile forms.
  • Work product in Operations. Tasks, agreements metadata, training progress, calendar availability (busy/free only when connected), help bookings, and similar operational records.
  • Technical logs. Security and audit events such as sign-in outcomes, access denials, and diagnostic data needed to operate and secure the Services.

How we use information

  • Provide, secure, and improve the Services
  • Authenticate users and enforce role-based access
  • Process credentialing, billing, and hourly-help requests you submit
  • Communicate about account, security, and service notices
  • Comply with law and enforce our terms

Provider messaging privacy

Sunshyn Credentialing & Medical Billing Group offers two-way text and picture messaging about billing and credentialing services. We collect the name, practice name, mobile number, message contents, documents, and images you provide, together with consent, opt-out, and message-delivery records.

We use this information to respond to questions, request and receive documents and receipts, provide service updates, route conversations to the appropriate Sunshyn team member, manage messaging preferences, and address delivery problems.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Mobile information is not shared with third parties or affiliates for marketing or promotional purposes. SMS consent is not transferred to other businesses for their own messaging programs.

We may provide information to service providers, including Twilio, telecommunications carriers, and hosting providers, solely as needed to deliver messages and support our services on our behalf. We may disclose information when required by law or necessary to address fraud, security incidents, or threats to safety. These disclosures do not authorize use of your information for marketing.

Participation is voluntary. We obtain consent before enrolling you, including through verbal consent to a Sunshyn representative. Consent is not a condition of purchasing services. Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe or HELP for assistance. You may receive a final opt-out confirmation. Opting out does not cancel your Sunshyn services or automatically delete existing records.

We retain messaging and consent records as needed to provide services, honor opt-outs, resolve disputes, and meet legal and contractual obligations. Contact us to request access, correction, or deletion; requests are subject to applicable law and retention obligations.

Do not send patient information or sensitive documents by text unless Sunshyn has specifically confirmed that the channel is approved for that purpose. Ask your representative for an appropriate document-submission method.

Read our Provider Messaging Terms and Conditions. For privacy questions or requests, email sunshyncredentialing@gmail.com.

Google sign-in

If you choose “Continue with Google,” authentication is handled by Google and Amazon Cognito. We receive identity claims needed to create or link your Operations session (such as name and email). We do not use Google sign-in to access your Gmail or Drive content. If you separately connect Google Calendar for availability, Operations stores busy/free times only—not event titles or details.

Sharing

We share information only as needed to operate the Services, including with:

  • Infrastructure providers (for example AWS Amplify, Cognito, and related AWS services)
  • Sunshyn team members with appropriate roles to fulfill requests you submit
  • Service providers under contract who help us run the platform
  • Authorities when required by law or to protect rights and safety

We do not sell your personal information.

Retention

We retain account, operational, and audit records for as long as needed to provide the Services, meet legal and contractual obligations, and resolve disputes. You may request deletion of account data subject to retention requirements for security and compliance records.

Security

We use administrative, technical, and physical safeguards appropriate to the Services, including encrypted transport, role-based access, and audited sensitive actions. No method of transmission or storage is completely secure.

Children

The Services are not directed to children under 13, and we do not knowingly collect their information.

Changes

We may update this policy from time to time. The “Last updated” date above will change when we do. Continued use of the Services after an update means you accept the revised policy.

Contact

Questions about privacy: sunshyncredentialing@gmail.com