What HIPAA LINK keeps, and for how long
What is never stored, what is deleted on a timer, and what stays until you remove it.
HIPAA LINK only keeps client information when you use a feature that needs it, only for as long as it needs it, and always under our Business Associate Agreement.
Here is what that means in practice, starting with what is never kept at all.
Not kept
None of this is stored:
- Session video and audio. The call is not recorded.
- Screen sharing.
- Files you share during a session. They travel over the session connection and are gone when it ends.
- Chat and the whiteboard. Both are discarded when the session ends.
- Completed consent forms. The signature, the time and the client’s IP address appear on the PDF, and that PDF is yours. We do not keep a copy and we cannot send it again, so save it to your record system while you have it.
- Assessment results. The same applies: save the PDF.
Kept for a limited time
- Faxes, sent and received. Deleted after 90 days, from HIPAA LINK and from the fax service that carried them.
- AI Notes audio. Deleted within 24 hours of the session ending. The audio exists only long enough to produce your note.
Kept until you delete them
- AI notes and their transcripts. Download each note into your practice’s record system.
- Documents in your Clinic or Personal folders. These stay until you delete them.
Keeping the clinical record in one place is the point. A note that lives only in HIPAA LINK is a second copy of something your record system should already hold.
Kept with your account
Your call history, including the name each client entered and any session notes you write, stays in your account.
Your account and billing information is kept while the account is active, to run the service.
A note on deleting
When you delete something, it goes from the product straight away. Backup copies age out afterwards, which is ordinary for any system that can be restored after a failure, so deletion is not instant everywhere at once.
HIPAA LINK is not your record system
Nothing above is a clinical record, and the product is not built to be one. The record stays wherever your practice keeps it. The things worth saving out of HIPAA LINK are the ones named above: consent PDFs, assessment PDFs, and your AI notes.
For the protections around all of this, see How HIPAA LINK protects your information. For the agreement that governs it, see Your BAA.