Privacy Policy

Overview

Rebecca Strout, an individual doing business as Dynamic Services ("Sunshyn," "we," "us") operates the Sunshyn Billing web application at https://sunshyn-billing.com (the "Service"). The Service helps lactation consultants and related healthcare practices manage credentialing, medical billing, claims, payments, and related practice operations.

We design the Service to support HIPAA-aligned handling of protected health information (PHI). This Privacy Policy describes what we collect, how we use it, and the choices available to authorized users.

Information we collect

Account and practice data

• Name, email address, role, and authentication credentials for authorized users
• Practice/office profile information (provider name, tax identifiers, NPI, billing preferences)
• Audit and activity logs related to use of the Service

Patient and billing data (PHI)

• Patient demographics, insurance information, clinical/billing documentation needed for claims
• Claims, encounters, visits, eligibility results, remittances (ERAs), and payment records
• Documents uploaded to support billing (for example EOBs, intake forms, faxed records)

PHI is accessed only by authorized users according to role and office assignment. We use encryption and access controls intended to protect PHI in transit and at rest.

Third-party integrations

• Claim.MD — claim submission, eligibility, and ERA retrieval when enabled for a practice
• QuickBooks Online / Wave — optional accounting connections used for platform invoicing. If an administrator connects accounting, we store OAuth tokens securely and may create or sync invoice records with the connected accounting provider at the administrator's direction
• Email and messaging — operational notifications and secure communications configured by your organization

Technical data

• Device/browser type, IP address, timestamps, and diagnostic logs needed to secure and operate the Service

How we use information

• Provide, maintain, and improve the Service
• Process claims, payments, eligibility checks, and billing workflows you initiate
• Generate platform invoices and optional accounting sync when authorized by an administrator
• Authenticate users, enforce access controls, and detect abuse or security incidents
• Comply with legal obligations and respond to lawful requests
• Communicate about the Service, support, and operational notices

We do not sell PHI or personal information.

How we share information

We share information only as needed to operate the Service or as you direct:

• Business associates and subprocessors — cloud hosting, infrastructure, and integrated vendors that help us run the Service under appropriate agreements
• Payors and clearinghouses — when you submit claims or run eligibility through integrated services
• Accounting providers — when an administrator connects QuickBooks or Wave and chooses to create or send invoices
• Legal and safety — when required by law or to protect rights, safety, and security

Retention and security

We retain information for as long as needed to provide the Service, meet contractual obligations, resolve disputes, and comply with law. Security measures include access controls, encryption for sensitive fields, audit logging, and least-privilege administrative access.

No method of transmission or storage is completely secure. Report suspected incidents to rebecca.strout@sunshyncredentialing.com.

Your choices and rights

Authorized users can update account settings within the Service. Covered entities and their patients may have additional rights under HIPAA and applicable state law. Contact us to exercise rights or submit privacy requests.

Children

The Service is intended for healthcare practices and authorized staff. It is not directed to children under 13.

Changes

We may update this Privacy Policy. Material changes will be reflected on this page with an updated effective date.

Contact

Rebecca Strout, an individual doing business as Dynamic Services
3413 Paramore Hill Rd, Millen, GA 30442
rebecca.strout@sunshyncredentialing.com