1. Scope & products covered
This Privacy Policy is issued by Great Point Inc ("GreatPoint," "we," "us," or "our"), headquartered in Dallas, Texas, with a second location in Lahore, Pakistan. It describes how we collect, use, disclose, and safeguard information across:
- greatpoint.us — our corporate site and client-services offering.
- JobMate (jobmate.services) — job management software for solo tradespeople and small trade businesses, covering scheduling, quoting, invoicing, and payments.
- WorkupScribe (workupscribe.com) — an ambient AI medical scribe that generates structured clinical documentation, including SOAP notes and ICD-10/CPT coding suggestions.
Because JobMate and WorkupScribe serve different users and process different categories of data, sections of this policy apply specifically to one product where noted.
2. Information we collect
Account & profile data
Name, email address, phone number, business or practice name, role, and login credentials when you create a GreatPoint, JobMate, or WorkupScribe account.
JobMate-specific data
Job records, customer names and addresses, quotes, invoices, scheduling data, and payment transaction metadata processed through our payment provider.
WorkupScribe-specific data
Audio captured during a clinical encounter (with patient consent obtained by the clinician), transcripts, generated clinical notes, ICD-10/CPT coding suggestions, and clinician edits to that documentation. This category may constitute Protected Health Information (PHI) under HIPAA — see Section 4.
Usage & device data
IP address, browser type, device identifiers, log data, app interaction events, and analytics data collected automatically when you use our products.
Payment data
Billing information for subscriptions (e.g., JobMate's paid plans, WorkupScribe's per-clinician pricing) is collected and processed by our PCI-compliant payment processor; GreatPoint does not store full payment card numbers.
3. AI & ambient audio processing (WorkupScribe)
WorkupScribe uses machine learning and large language model technology to transcribe clinical encounters and draft structured documentation. Specifically:
- Audio is captured only with the clinician's initiation and patient consent, and is used solely to generate the clinical note associated with that encounter.
- Audio recordings are encrypted in transit and at rest, and are retained only as long as necessary to generate, verify, and finalize the associated documentation, consistent with our data retention schedule.
- GreatPoint does not use PHI submitted through WorkupScribe to train shared or general-purpose AI models unless a customer has separately and explicitly opted in.
- AI-generated notes, coding suggestions, and summaries require clinician review and are not a substitute for independent clinical judgment.
4. Protected Health Information & HIPAA (WorkupScribe)
For covered-entity and business-associate customers, WorkupScribe is designed to be HIPAA-ready. Where WorkupScribe processes PHI on behalf of a healthcare provider, GreatPoint acts as a Business Associate, and use of WorkupScribe is governed by a separate Business Associate Agreement (BAA) that takes precedence over this Privacy Policy for PHI handling. Our safeguards for PHI include encryption in transit and at rest, role-based access controls, audit logging, and minimum-necessary data-handling practices. Questions about our BAA or HIPAA compliance posture can be directed to the contact in Section 14.
5. How we use information
- To provide, maintain, and improve JobMate, WorkupScribe, and greatpoint.us.
- To process subscriptions, trials, and payments.
- To generate AI-assisted clinical documentation (WorkupScribe) or job/quote/invoice records (JobMate).
- To communicate with you about your account, product updates, and support requests.
- To detect, investigate, and prevent fraud, abuse, and security incidents.
- To comply with legal, regulatory, and contractual obligations, including HIPAA where applicable.
7. Data security
GreatPoint maintains a SOC 2 Type II-aligned security program for WorkupScribe and applies encryption in transit (TLS) and at rest, role-based access controls, and regular security testing across our products. No system is completely secure, and we encourage users to use strong, unique passwords and enable available account protections.
8. Retention & deletion
We retain account, job, and billing data for as long as your account is active and as needed to meet legal, tax, and contractual obligations. WorkupScribe retains clinical documentation according to the retention schedule agreed in your Business Associate Agreement, which may reflect medical record-keeping requirements in your jurisdiction. You may request deletion of your account data, subject to any records we are legally required to retain.
9. Your privacy rights
Depending on your location, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing, under frameworks such as the California Consumer Privacy Act (CCPA), the EU/UK General Data Protection Regulation (GDPR), and comparable state and international laws. To exercise these rights, contact us using the details in Section 14. For WorkupScribe users, requests involving PHI may be subject to HIPAA's separate access and amendment procedures and coordinated with the relevant covered entity.
11. Children's privacy
Our products are intended for business and healthcare professionals and are not directed to children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children.
12. International data transfers
GreatPoint operates from the United States (Dallas, TX) and Pakistan (Lahore). Information may be processed and stored in either location or by cloud infrastructure providers operating in other countries. Where required, we use appropriate safeguards for cross-border data transfers.
13. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date above, and, where required by law or by a WorkupScribe Business Associate Agreement, by direct notice to affected customers.
14. Contact us
Questions about this Privacy Policy, data requests, or our HIPAA/BAA documentation can be sent to contact@greatpoint.us, or by mail to Great Point Inc, Dallas, TX, US.