Privacy Policy — UControl Billing Partner Portal

Last updated: May 31, 2026

This Privacy Policy describes how Practice Revenue Management Inc. ("Practice Revenue Management," "we," "us," or "our") collects, uses, and shares information when you use the UControl Billing Partner Portal at https://ucontrolpartner.com (the "Portal").

1. Information we collect

We collect the following categories of information:

(a) Identity and contact information — your name, email address, and any other contact details you provide when invited to or registering for the Portal.

(b) Authentication credentials — your password (stored in hashed and salted form by our authentication provider) and session tokens used to keep you signed in.

(c) Commission and partnership data — records of the clients you have referred, the invoices associated with those clients, the commissions you have earned, your payout history, and related notes maintained by Practice Revenue Management.

(d) Usage and device information — IP address, browser type and version, operating system, device identifiers, pages viewed, and the dates and times of your interactions with the Portal. This information is collected automatically when you use the Portal.

(e) Communications — any messages you send to us or that we send to you, including transactional emails relating to your account.

We do not knowingly collect Social Security Numbers, government identification numbers, financial account credentials, or health information through the Portal. The Portal is intended for business use by adults who have been invited to participate in our partnership program; we do not knowingly collect personal information from children under 18.

2. How we use information

We use the information we collect to:

(a) provide, operate, secure, and improve the Portal;

(b) authenticate you and protect your account;

(c) calculate, display, and process commissions and payouts;

(d) communicate with you about your account, including transactional emails such as sign-in links, password resets, and payout notifications;

(e) comply with our legal obligations, including tax and recordkeeping requirements;

(f) investigate and prevent fraud, abuse, or security incidents;

(g) enforce our Terms of Service and any applicable Partnership Agreement.

We do not sell your personal information. We do not use your information for advertising or marketing to you beyond information directly relating to our partnership with you.

3. How we share information

We share information only as follows:

(a) With service providers that help us operate the Portal. These include our hosting and database provider, which stores Portal data on infrastructure operated under appropriate security and confidentiality terms; our authentication provider, which manages account credentials, sessions, and password resets; our email delivery provider, which sends transactional emails on our behalf from notify.ucontrolpartner.com; and our accounting and billing system, which is the source of truth for the invoices and collections referenced by your commissions. These providers are contractually obligated to handle your information only as needed to provide their services and to maintain appropriate security.

(b) With legal or regulatory authorities when required by law, subpoena, court order, or to comply with regulatory obligations.

(c) In connection with a business transfer such as a merger, acquisition, or sale of assets, in which case the receiving party will be bound by privacy obligations no less protective than these.

We do not share your information with marketing partners, advertisers, or other third parties for their own use.

4. Data security

We protect your information using a combination of technical and organizational safeguards, including encrypted transport (HTTPS) for all Portal traffic, encryption at rest in our databases, role-based access controls, row-level security policies that restrict each partner to viewing only their own data, hashed and salted password storage, and ongoing monitoring for unauthorized access. No system is perfectly secure, however, and you remain responsible for protecting your account credentials.

5. Cookies and similar technologies

The Portal uses strictly necessary cookies and similar local storage to keep you signed in, remember your preferences, and protect against fraud. We do not use third-party advertising or tracking cookies. You can control cookies through your browser settings, but disabling them may prevent the Portal from functioning correctly.

6. Your rights and choices

Depending on where you live, you may have certain rights with respect to your personal information, including the right to access, correct, delete, or restrict our processing of your information, or to receive a portable copy of it. To exercise any of these rights, contact us at the address below. We will respond within the timeframe required by applicable law. We do not discriminate against you for exercising any of these rights.

If you are a resident of California, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we have collected about you and the right to delete that information, subject to certain exceptions for information we are required to retain.

7. Data retention

We retain your information for as long as your account is active and for a reasonable period afterward to comply with our legal, tax, and regulatory obligations, resolve disputes, and enforce our agreements. Commission and payout records are typically retained for at least seven years following the year in which the commission was earned, in line with applicable U.S. financial recordkeeping requirements.

8. International data transfers

The Portal is operated from the United States and our service providers may process your information in the United States or other countries. If you access the Portal from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your jurisdiction.

9. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be communicated to you by email or through a prominent notice in the Portal.

10. Contact

Questions, concerns, or requests relating to this Privacy Policy may be directed to:

Practice Revenue Management Inc.

37 Grand Blvd

Brentwood, NY 11717

partners@ucontrolbilling.com