Indy Behavioral Health Response Extension Privacy Policy

Indy Behavioral Health Response Extension
Last Updated: 02/18/2026


1. Overview

The Indy Behavioral Health Response Extension (“Extension”) is a Chrome browser extension designed for authorized Indy Behavioral Health staff. It provides quick access to approved response templates and allows users to copy those responses into email communications.

This Privacy Policy explains what information the Extension collects, how it is used, and how it is protected.


2. Information We Collect

The Extension collects only the minimum information necessary to authenticate authorized users and provide access to internal response templates.

Authentication Information

We may collect:

  • User email address (for one-time passcode authentication)
  • Temporary authentication tokens to maintain a secure session

This information is used solely to:

  • Verify authorized staff access
  • Deliver approved response templates based on user permissions

3. Information We Do NOT Collect

The Extension does not collect, access, store, or transmit:

  • Patient health information (PHI)
  • Medical records or diagnoses
  • Email content
  • Website browsing history
  • Personal communications
  • Keystrokes or activity tracking
  • Financial or payment information
  • Location data
  • Background analytics unrelated to extension functionality

The Extension does not monitor user activity outside of its intended purpose.


4. How Information Is Used

Collected authentication information is used strictly for:

  • Verifying user identity
  • Maintaining secure login sessions
  • Retrieving authorized response templates

We do not use data for:

  • Advertising
  • Marketing analytics
  • Profiling
  • Sale to third parties
  • Any purpose unrelated to the Extension’s single function

5. Data Storage

  • Login session information may be stored locally using Chrome’s secure extension storage to maintain login status.
  • Authentication and template retrieval are processed through secure backend services.
  • No patient or medical information is stored by the Extension.

6. Data Sharing

Indy Behavioral Health does not sell, rent, or transfer user data to third parties.

Data is processed only:

  • Through authorized backend services
  • For authentication and delivery of approved response templates

7. Remote Code

The Extension does not execute remote code.

It may retrieve structured template data (such as JSON) from secure backend endpoints but does not download or execute external scripts.


8. Security

We implement reasonable administrative, technical, and organizational safeguards to protect authentication information from unauthorized access, disclosure, alteration, or destruction.

Access to templates is restricted to authorized staff only.


9. Data Retention

Authentication information is retained only as long as necessary to maintain authorized access.

Users may log out at any time, which removes locally stored session data.


10. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be reflected by the “Last Updated” date at the top of this document.


11. Contact Information

If you have questions regarding this Privacy Policy, please contact:

Indy Behavioral Health
2629 Waterfront Pkwy E Dr Suite 375
Indianapolis, IN 46214
Phone: 317-978-0257
Email: [email protected]
Website: https://indybehavioralhealth.com