Privacy
Privacy Policy
What this page covers
This site has two separate ways of collecting information: chatting with our AI assistant, and submitting a contact, booking, or insurance verification form. They work differently, so they're described separately below.
Chatting with our AI assistant
Most questions asked in the chat widget (hours, insurance, services, booking) are answered automatically without any AI model seeing your message at all. Only questions that don't match one of those common topics are sent to our AI provider, Anthropic, along with a short window of recent messages from the same conversation so it can understand follow-up questions — never your entire chat history, and never messages that were already answered automatically.
We assign your browser an anonymous, randomly generated session and conversation ID — not tied to your name, email, or any account. The text of messages you send through the chat widget is stored on our server for up to 30 days to maintain conversation context — regardless of whether your question was answered automatically or by the AI model — after which it is automatically deleted. Please avoid sharing sensitive personal or medical details in the chat that you wouldn't want stored for that period — this chat is not a secure medical records system.
We also record aggregate, anonymous statistics about chat usage (e.g. which topics are asked about, how long responses take) to help us improve the assistant. This aggregate data does not currently have an automated deletion schedule.
Contact, booking, and insurance verification forms
These forms are a separate pathway from the chat assistant. Information you submit — which may include your name, phone number, email address, date of birth, and insurance carrier/member ID depending on the form — is sent directly by email to clinic staff using our email provider, Resend. This form data is not stored in our database. It is retained in the clinic's email inbox and by Resend for as long as those systems ordinarily retain sent mail, which is outside this website's control.
Security
We use reasonable technical safeguards appropriate to the size of this practice, including database access restricted to server-side application code only, and rate limiting on forms and the chat assistant to reduce abuse. No method of storage or transmission over the internet is completely secure, and we cannot guarantee absolute security.
Not a HIPAA-covered communication channel
This website, its chat assistant, and these forms are not intended as a HIPAA-covered communication channel, and we do not represent them as such. If you need to share protected health information or have an urgent medical concern, please contact the clinic directly by phone at (650) 949-3637 rather than through chat or these forms. This assistant does not provide medical advice or diagnosis.
Questions about this policy
Contact us at info@mahjongacu.com or (650) 949-3637 with any privacy questions.
Note: This page is a factual description of the data practices currently implemented on this website, as of the date it was last updated. It has not been reviewed by an attorney and is not a legal document. It must be reviewed and approved by the clinic owner and qualified legal counsel before this site is used to serve real patients.