Effective date: October 6, 2026 · Last updated: October 6, 2026
This Privacy Policy describes how Flex Stream, Inc. ("Flex Stream," "we," "us"), a California corporation located in Glendale, California, collects, uses, and shares personal information when you visit americanhealthcarehub.com (the "Hub"), subscribe to our newsletter and alerts, or use the CareOnboard platform at staff.americanhealthcarehub.com (the "Platform").
Information you give us. When you subscribe to alerts or contact us, we collect your name, work email address, agency name, and the content of your message. When you create a My Hub account, we collect your name, email address, organization and password (stored only in hashed form), the date you agreed to our Terms of Use, and, for each signed-in session, your browser type and IP address. If you fill in an agency profile for My Documents, we collect the agency details you enter, including its logo, the names of people such as the administrator and privacy officer, and agency phone numbers. When an agency purchases a subscription, we collect billing contact details; payment card details are collected and processed by our payment processor (Stripe) and never touch our servers. When your agency uses the Platform to onboard staff, the agency (as the employer) submits personnel information (credentials, licenses, medical clearances, and signed forms), which we process on the agency's behalf.
Hub Assistant chat. Our site offers the Hub Assistant, an automated AI chat, not a person. If you use it, we collect the messages you type, the assistant's replies, the time, and your IP address (used to limit how many messages one connection can send each day). To generate each reply, your messages are sent to our AI provider, Anthropic, PBC, which processes them for us. We store chat transcripts so our team can review the quality of answers and improve the Hub. Please do not enter patient information, other health information, Social Security numbers or other sensitive personal information in the chat. If you choose to attach the conversation when you contact a person, it is added to your contact-form message; if you sign up for the newsletter in the chat, we collect your email address for that purpose.
Information collected automatically. Standard server logs: IP address, browser type, pages viewed, and timestamps. We use Google Analytics (GA4), a service of Google LLC, to understand aggregate site usage: pages viewed, approximate region, device and browser type, and how visitors arrive. Google Analytics uses first-party cookies to do this. IP addresses are anonymized, Google signals and advertising personalization are turned off, and we do not use advertising trackers or sell browsing data. You can opt out with Google's browser add-on.
Our site does not change its behavior in response to browser "Do Not Track" signals, because there is no common standard for interpreting them. Other than Google Analytics, which measures use of this site for us as described above, we do not allow third parties to collect personally identifiable information about your online activities over time and across different websites when you use our site. We treat a Global Privacy Control signal as a request not to sell or share your personal information; we do neither.
To deliver the newsletter and regulatory alerts you asked for; to answer your questions, including in the Hub Assistant chat; to provide, secure, and support the Platform; to process payments and manage subscriptions; to comply with legal obligations; and to improve our content and services. We do not sell personal information, and we do not share it with third parties for their own marketing.
The Platform is built on AWS HIPAA-eligible services. Where an agency's use of the Platform involves protected health information, Flex Stream acts as a business associate and will execute a Business Associate Agreement (BAA) with the agency. Personnel onboarding records are processed under the agency's direction as described in the agency's service agreement. The Hub website and the Hub Assistant chat are not designed to receive protected health information; please do not send it through them.
We share personal information only with service providers that process it for us under contract: Amazon Web Services (hosting, storage, and email delivery), Stripe (payment processing), Google LLC (Google Analytics site measurement, described above), and Anthropic, PBC (the AI model behind the Hub Assistant chat); with your agency (for Platform personnel records the agency controls); when required by law; or in connection with a corporate transaction with notice to you. Where an agency turns on the Platform's optional AI document check, the documents it checks are analyzed by an Anthropic Claude model, through Amazon Web Services (Amazon Bedrock) or directly through Anthropic, under the agency's service agreement.
We retain newsletter subscription data until you unsubscribe; Hub Assistant chat transcripts for up to 12 months, after which they are deleted (a conversation you choose to attach to a contact-form message becomes part of that message); contact-form messages for as long as needed to handle your request and our business relationship with you; billing records for as long as tax and accounting law requires; and Platform records for as long as the agency's account requires (personnel-file retention periods are set by the agency to meet its regulatory obligations). We use encryption in transit and at rest, role-based access, and audit logging.
Every newsletter email includes an unsubscribe link. California residents may ask us to tell them the categories and specific pieces of personal information we hold about them, to correct it, or to delete it. Flex Stream does not currently meet the thresholds that make a business subject to the California Consumer Privacy Act (CCPA), but we honor these requests voluntarily, subject to the same exceptions the CCPA recognizes, and we will not discriminate against you for making one. We do not sell personal information or share it for cross-context behavioral advertising, including that of consumers under 16. For personnel records held on behalf of an agency, we will refer your request to the agency and support its response. To make a request, email hello@americanhealthcarehub.com with "Privacy request" in the subject. We verify a request by confirming that you control the email address the information is tied to, we respond within 45 days, and we accept requests from an authorized agent who provides your signed permission.
Our services are for businesses and their staff; they are not directed to children under 16, and we do not knowingly collect their information.
We will post any changes on this page with a new "Last updated" date; material changes will be announced to subscribers by email. Questions: hello@americanhealthcarehub.com, or write to Flex Stream, Inc., Glendale, California.