Last updated: May 17, 2026
Feezza Inc. takes the privacy and security of health information seriously. This Privacy Policy explains how we collect, use, and protect information when you use Wintora. Under HIPAA, Feezza Inc. acts as a Business Associate when processing Protected Health Information on behalf of healthcare provider Customers.
Feezza Inc. is a Delaware corporation that operates Wintora, a software platform for hospital revenue cycle management. For privacy questions, contact us at: legal@feezza.com
Account information: When you contact us or create an account, we collect your name, email address, organization name, and phone number.
Claims data (PHI): When you upload a denied claims CSV, that file may contain Protected Health Information including patient names, dates of service, procedure codes, and claim amounts. This data is processed solely to provide the Wintora service and is governed by your executed BAA.
Usage data: We collect standard server logs including IP addresses, browser type, pages visited, and timestamps. This data is used to maintain Wintora and is never linked to patient records.
All PHI processed by Wintora is subject to the terms of your executed Business Associate Agreement with Feezza Inc. Do not upload PHI without a signed BAA in place. Contact legal@feezza.com to execute a BAA before use.
Upon termination of your use of Wintora, all PHI is deleted or returned per your BAA. We do not retain PHI beyond what is necessary to provide the service.
Feezza Inc. implements industry-standard technical and administrative safeguards including: TLS encryption for all data in transit, encryption at rest for all stored data, access controls limiting PHI access to authorized personnel only, audit logging of all PHI access, and regular security reviews.
In the event of a security incident affecting your PHI, we will notify you in writing within 5 business days of discovery, in accordance with HIPAA Breach Notification requirements.
Claims data and generated appeal letters are retained only for the duration of your active use of Wintora. Session-based uploads are cleared when your session ends. Account information is retained for as long as your account is active and for a reasonable period thereafter for legal and business purposes.
Wintora is hosted on infrastructure configured to meet HIPAA requirements. Our hosting providers operate under their own BAAs with Feezza Inc. We do not use third-party advertising networks or analytics services that process PHI.
As a Customer, you have the right to access the data your organization has uploaded, request deletion of your data at any time, receive a copy of your data in a portable format, and terminate your use of Wintora with all data deleted per your BAA. Contact legal@feezza.com to exercise any of these rights.
Information processed under HIPAA as PHI is exempt from CCPA. For non-PHI personal information, California residents may request disclosure of categories collected and request deletion. Contact legal@feezza.com to submit a request.
We may update this Privacy Policy from time to time. We will notify active Customers of material changes by email. Continued use of Wintora after any update constitutes acceptance of the revised Policy.
For privacy questions, BAA execution, data requests, or security concerns: Feezza Inc. · legal@feezza.com