Privacy Policy

Cadence is home health billing software operated by Palana, Inc. (“Palana Health,” “we,” “us”). This policy explains what information we collect through our website at palanahealth.com and through the Cadence application, how we use it, and the choices you have.

This distinction matters, because different rules apply to each.

• Information about you and your agency. Your name, work email, agency name, phone number, billing address, and payment details. We are responsible for this information as a business, and this policy governs it.
• Information about your patients. When your agency uses Cadence, you enter patient information — names, dates of birth, Medicaid and client numbers, diagnoses, authorizations, and visit records. Much of this is protected health information (PHI). We handle it on your behalf as a business associate under HIPAA, not as its owner. Your agency decides what goes in and what happens to it; our handling is governed by our Business Associate Agreement with you.

• Account information you give us when you sign up or are invited: name, email, phone, role, and agency details.
• Billing information processed by our payment provider. We do not store full card numbers on our systems.
• Content you enter into Cadence, including patient records, visits, authorizations, notes, and billing status.
• Usage and security data: log-in times, IP address, browser and device information, and an audit record of changes made in the application.
• Website analytics from visitors to palanahealth.com, described below.

• To provide, maintain, and support the Cadence service.
• To authenticate users, secure accounts, and detect suspicious activity.
• To bill your subscription and send service-related emails.
• To respond when you contact us.
• To improve the product and diagnose problems.
• To meet legal, regulatory, and contractual obligations.

We do not sell your information. We do not use patient information for advertising, and we do not use it to train machine learning models.

We share information with service providers who help us run Cadence, each bound by contract to protect it and to use it only for the services they provide to us. These include cloud hosting and database providers, our payment processor, our transactional email provider, and our file storage provider.

We may also disclose information when required by law, to protect rights and safety, or in connection with a merger, acquisition, or sale of assets — in which case we will give notice before your information becomes subject to a different policy.

• Two-factor authentication is required on every account. It is not optional.
• Sessions automatically log out after a period of inactivity.
• Each agency's data is isolated from every other agency's.
• Data is encrypted in transit and at rest.
• Changes within the application are written to an audit log that administrators can review.

No system is perfectly secure. If we become aware of a breach affecting your information, we will notify you as required by law and by our Business Associate Agreement.

We keep your information for as long as your subscription is active. Records deleted inside the application go to a recycle bin for 90 days before being permanently removed. If your subscription closes, we retain your agency's data for 30 days so you can reactivate or request an export, after which it is permanently deleted. We may retain limited records where the law requires it.

You can review and update your account information from within Cadence. Account administrators can add, change, and remove users. If you want a copy of your agency's data, or want it deleted sooner than the periods described above, contact us at support@palanahealth.com.

If you are a patient of an agency that uses Cadence and you have a question about your health information, please contact that agency directly — they control those records, not us. We will support them in responding.

Our marketing website uses Google Analytics to understand how visitors find and use the site. This tells us things like which pages are viewed and roughly where visitors come from. You can opt out using Google's browser add-on or your browser's cookie controls. The Cadence application itself uses cookies only for signing you in and keeping you signed in.

Cadence is business software sold to home health agencies and is not directed to children. We do not knowingly collect information directly from children through our website.

We may update this policy as the product changes. When we make material changes, we will update the date above and notify account owners by email.

Questions about this policy: hello@palanahealth.com
Support and data requests: support@palanahealth.com