Privacy

Privacy Policy

Last updated: September 10, 2026

IntakeFormHealth is in early access. The service described on our home page is not open to the public yet. This policy describes what this website does today. It will be rewritten, and reviewed by counsel, before we handle anyone's health information.

The short version

This website sets no cookies, runs no analytics, and has no account system. The form sends what you type straight to us, and we use it only to arrange a call. If you take that call, an AI agent speaks with you and the call is recorded and transcribed so your answers can be written up.

What this website collects today

What the early-access form sends

When you press "Request early access", your browser sends what you typed to our server, which forwards it by email to our inbox at sitecalls@agentmail.to. That is four things: your name, your phone number, who the profile is for, and the day and time you picked.

We use it to contact you about early access and for nothing else. We do not add you to a marketing list, and we do not pass it to anyone. It is handled in transit by Vercel, who host this site, and by AgentMail, who run that inbox. It then sits in the inbox; we do not yet have a formal retention schedule, and this section will say what it is once we do.

Ordinary email is not an encrypted or protected channel. Please do not put any medical detail into this form — no diagnoses, no medications. We are not asking for it and it should not travel this way.

Submitting the form does not schedule a call. No appointment is created anywhere. We are not open to the public yet.

The call from our AI agent

If you ask for early access, an AI voice agent calls the number you gave us. It says at the start that it is an AI and not a person. The call is recorded and transcribed so that what you say can be turned into a written profile. That is the whole point of the service, and it is the most sensitive thing we do.

Two companies handle that call for us. Twilio carries the phone connection. ElevenLabs provides the voice agent and holds the recording, the transcript, and the information pulled out of it. Both keep that data under their own terms, and both would need to be named in any agreement we sign about health information.

We do not yet have a formal retention schedule for recordings or transcripts. Until we publish one, assume a recording persists with ElevenLabs. You can ask us to delete yours at any time.

While we are testing, please do not give the agent real medical information. We have not yet signed the agreements that HIPAA requires with Twilio and ElevenLabs, so this pipeline is not ready to carry anyone's real health details. We will say so here, in plain terms, when that changes. Calls during this phase are for checking that the agent works.

Standard server logs

This site is hosted by Vercel, which records ordinary web request data on our behalf: IP address, the page requested, timestamp, browser user agent, and referring page. This is the basic record any web server keeps in order to serve pages and detect abuse. We do not use it to build profiles of visitors. Vercel's handling of that data is governed by Vercel's privacy policy.

Fonts loaded from Google

Our pages load the Quicksand and Inter typefaces from Google Fonts. Your browser requests those font files directly from fonts.googleapis.com and fonts.gstatic.com, which means Google receives your IP address and user agent when you view a page. We do not control and do not receive that data. It is governed by Google's privacy policy. We plan to self-host these fonts to remove that request.

What this website does not do

No cookies are set by this site.
No analytics, advertising, or tracking pixels of any kind.
No accounts, no logins, no passwords.
The form itself asks only for a name, a phone number, who the profile is for, and a preferred time. Please do not put medical detail into it — the call is where that conversation belongs.
Nothing is sold, rented, or shared with advertisers. This is not a business we intend to run.
No mobile numbers or SMS consent are shared with third parties or affiliates for their marketing.

SMS and text messaging

If you tick the SMS box on our form and give us a mobile number, you agree to receive text messages from IntakeFormHealth about your own request: confirmation, call scheduling and reminders, and status updates. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time and HELP for help. Consent to receive text messages is not a condition of using IntakeFormHealth. We send no marketing texts.

Mobile phone numbers and SMS opt-in consent are never sold, rented, or shared with third parties or affiliates for their marketing purposes. Your number is shared only with the messaging provider that delivers the texts on our behalf, and only to send the messages you asked for.

We record when you gave consent and the exact wording you agreed to, so we can show what was consented to and when. Full details are on our SMS Terms page.

Health information and HIPAA

We describe our intended service in HIPAA terms on the home page, because that is the standard we are building to. To be precise about where we actually stand:

The form is not a place for health information. It asks only for a name, a phone number, who the profile is for, and a preferred time, and it reaches us as ordinary email, which is not a protected channel — so please do not include diagnoses, medications, or anything else clinical in it.
The call is the part that would carry health information, and it is not ready to. HIPAA requires a Business Associate Agreement with every vendor that handles protected health information on our behalf. We do not have one with Twilio or with ElevenLabs yet, and until we do, this pipeline should not carry anyone's real medical details.
Our HIPAA commitments describe the product we are building, not a service you can buy today. Encryption, access logging, per-share permissions and Business Associate Agreements are what the service is designed around. They are not yet operating claims about a live system.
Business Associate Agreements are not yet available to sign. When we begin handling protected health information for a covered entity, HIPAA requires one, and we will have one in place before that happens.

If you are a clinic or agency evaluating us, we would rather you know this now than discover it during diligence.

Children's information

The service we are building is meant to let a parent or guardian keep a profile for a child. Today we ask that an adult submit the request and take the call. We do not knowingly collect information from children directly, and a child should not be the one speaking to the agent. When the service launches, a child's profile will be created and controlled by their parent or guardian, and this policy will be updated to describe how that works.

Your rights

If you sent us an early-access request or took a call with the agent, you can ask us what we hold — including any recording or transcript — ask us to correct it, or ask us to delete it. Write to sitecalls@agentmail.to and we will do it. If you never sent one, we hold nothing about you from this website. When the service launches this section will describe formal request handling and response times.

Changes to this policy

We will update this page when what we do changes, and we will move the "last updated" date at the top. Because the service is pre-launch, expect this document to change substantially before anything goes live.

Contact

Email sitecalls@agentmail.to with any question about this policy, about what we hold, or to ask us to delete an early-access request you sent. The early-access form on our home page reaches the same inbox.