Who we are
HealingQuest LLC, is a Colorado company in the business of mental health care service delivery and administration, and offers clinical services as Boulder Emotional Wellness. elig.pro is software-as-a-service to support clinic administrators. The website address is: https://elig.pro
For more information write support@elig.pro
We are located at 3434 47th Street Suite 130 Boulder, CO 80301
DUNS 046261890 | HCPF/Gainwell Trading Partner ID 11214028
CO HCPF 9000157616
What personal data we collect and why we collect it
elig.pro collects some personal data, such as name, email address, personal account preferences; transactional data, such as batch submission information; and technical data, such as information about cookies.
We collect this information for the operation of the site, including account functions and billing functions. This information will not be shared or sold.
Protected Health Information is discussed in the next section.
elig.pro is enabled by a ‘LAMP stack’ (Linux operating system, Apache webserver, Mysql database, and a PHP code interpreter) as well as a WordPress installation. HIPAA compliance for these components is managed by LuxSci, a Business Associate of elig.pro. WordPress only collects the data shown on the User Profile screen from registered users.
We are responsible for the user interface and server routines that receive, process, store, transmit, and delete data.
We collect and share billing information with Stripe.
Protected Health Information
Registered users may access the upload function to securely transmit encrypted Medicaid IDs and receive through email or by download acknowledgements, digital receipts, results spreadsheets, and invoices. Files containing PHI are not emailed and are made available for download after log in, to assure encrypted transmission, a HIPAA requirement.
Uploaded lists of Medicaid IDs are “Protected Health Information” (PHI) according to HIPAA. The generated request file (a “270”) and the response from the Colorado administrator (a “271”) also contain PHI, as does the spreadsheet, which is an .xlsx (Excel) file.
elig.pro keeps none of this data for very long. The uploaded list is deleted almost immediately, as is the request file that gets sent to HCPF/Gainwell. When files are received from HCPF/Gainwell, they are stored in an encrypted database until requested by the user. Once the user has received the digital receipt and the spreadsheet, all such data is deleted from our servers.
During testing (elig.pro is not in production as of Jan 28 2024) some data files are preserved to assist in development. All persistent files are stored in an encrypted database rather than stored in the file system.
We do keep an activity log with no protected health information. This activity log has entries for uploads, emails sent, user download events, and billing events. This data is also encrypted and stored in a secure database.
Cookies
When you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
Who we share your data with
If you request a password reset, your IP address will be included in the reset email.
How long we retain your data
We also store the personal information users provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). elig.pro administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where your data is sent
Your data is sent to secure LuxSci servers. LuxSci does business in Boston, Massachusetts. No user data is sent to HCPF/Gainwell when eligibility batches are submitted. We also share billing information with Stripe.
What third parties we receive data from
elig.pro receives responses to batch requests from HCPF/Gainwell. We also receive billing information from Stripe.