SR Solutions · Privacy
Privacy policy.
SR Solutions builds Sona, an AI front desk for practices in New York. That puts us in two different positions depending on who you are, so this page separates them before it says anything else.
Last updated October 2026
Who you are
Who decides, and who to ask
Visitor
You came to this website
You are reading our pages, calling the demo line, or asking for a
demo. We decide what is collected and why, so this policy governs
it in full. Ask us anything on this page directly.
Patient
You dealt with a practice that runs Sona
You called, booked, or were texted by a practice using Sona. That
practice — not SR Solutions — decides what is
collected and why. We handle your information only on its
instructions, under a Business Associate Agreement where HIPAA
applies. The practice’s own privacy notice governs, and
requests to see, correct or delete your records must go to the
practice, because only it can authorise one. Tell us and we will
pass it on, but we cannot act alone.
If you are a website visitor
Item
What applies
Collected
What you hand us, and little else
Your name, business, email, phone and whatever you write, when you
book a demo or get in touch. If you call the demo line, that call
reaches Sona and is recorded and transcribed so we can improve the
agent — see Calls below. Our host keeps standard
server logs, including IP address and user agent, for security and
troubleshooting.
Tracking
No analytics, no advertising, no cookies
This website sets no cookies of its own, runs no analytics or
advertising scripts, and loads no third-party trackers. There is no
cookie banner because there is nothing to consent to. The one thing
stored in your browser is a single session flag remembering that
you have already seen the opening animation, which is cleared when
you close the tab and never leaves your device.
Calls
The demo line is recorded
Calling (347) 694-4534 connects you
to Sona. The call is recorded and transcribed so we can review how
the agent performed. Do not share medical, financial or other
sensitive details with the demo line — it is a demonstration,
not a real practice, and nothing you say to it reaches a clinician.
Use
To reply to you, and to run the demo
We use what you give us to answer you, arrange and hold the demo,
and keep a record of our own correspondence. We do not build
advertising profiles, and we do not use what you tell us to target
you anywhere else.
Never sold
Not sold, not rented, not brokered
We do not sell, rent or trade personal information, and we never
share mobile numbers with third parties or affiliates for
marketing or promotional purposes.
See our SMS terms for messaging specifically.
If you are a patient or client
Item
What applies
Our role
Business associate, not provider
SR Solutions is not a healthcare provider and gives no medical
advice. Where a practice is a HIPAA covered entity, we act as its
business associate under a signed Business Associate Agreement, and
we use protected health information only to deliver the service the
practice has engaged us for.
Handled
What it takes to run a front desk
Your name and contact details; the appointment itself — what,
when, with whom, and its status; the recording and transcript of
any call you have with the agent; and the messages sent to you. We
do not ask for or store diagnoses, treatment notes, clinical
records or payment card numbers.
Separation
One practice never sees another’s
Every record is bound to the practice it belongs to, and that
boundary is enforced on the server on every single request —
not in the page you are shown. A practice can reach its own
patients and no one else’s.
Your rights
Ask the practice
To see, correct, export or delete your records, contact the
practice you dealt with. It holds the relationship and the legal
duty to respond; we act on its instruction and will carry out a
verified request promptly. To stop text messages immediately
without going through anyone, reply STOP to any
message.
Applying to everyone
Item
What applies
Vendors
Named, and chosen on this rule
Running a phone line means other companies carry parts of it. Ours
are Amazon Web Services (database and storage), Fly.io
(application hosting), Retell AI (voice), Twilio (telephony and
SMS), and the practice’s own calendar provider. Our selection
rule is simple: any vendor that could touch patient
information must be willing to sign a BAA, and where a
tool will not, patient information does not go through it —
our automation layer, for instance, receives only record
identifiers and never the information itself.
Location
Stored in the United States
Data is held in US regions. We do not move it offshore.
Security
Encrypted, and access by name
Information is encrypted in transit and at rest. Credentials live
in a managed secret store, never in code. Everyone with access has
their own named login, multi-factor authentication is required on
administrative accounts, and access is revoked when a person leaves
a role. No method is perfectly secure, and we do not claim
otherwise.
Retention
As long as the service needs, then gone
Appointment and contact records are kept while the practice is a
client and for the period its own retention rules require. Call
recordings and transcripts are kept for a limited quality-review
window and then deleted. Demo enquiries are kept while we are in
contact and for a reasonable period after.
Children
Not directed at children
This website is not for children under 13 and we do not knowingly
collect their information through it. Where a practice treats
children, a parent or guardian provides the contact details and the
consent, and the practice’s own notice governs.
Changes
Dated at the top of this page
If this policy changes we update the date above. Material changes
affecting a practice go to that practice directly.
Contact
saifuddin@srsolutions.nyc
SR Solutions, New York, NY ·
(347) 242-8360. Write to us with
any question about this policy and we will answer. If you are a
patient, say which practice you dealt with so we can route it.
Put fifteen minutes on the calendar.
We will look at your actual week — which calls go unanswered, which chairs sit empty — and tell you honestly whether Sona is worth doing for your practice.
Slot
Pick a time that suits you
15 min