Privacy Policy
Last updated: June 6, 2026
This Privacy Policy describes the policies and procedures of Echo One Inc ("Echo1", "we", "our", or "us") on the collection, use, and disclosure of your information when you use our Service, and tells you about your privacy rights and how the law protects you.
We use your personal data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.
Interpretation and Definitions
Interpretation
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Definitions
For the purposes of this Privacy Policy:
Account means a unique account created for you to access our Service or parts of our Service.
Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to Echo One Inc, 2402 Westport Dr, Norman, OK 73069.
Personal Data is any information that relates to an identified or identifiable individual.
Service refers to the Echo1 platform and website, accessible from echo1solutions.com and app.echo1.co.
Service Provider means any natural or legal person who processes the data on behalf of the Company, including third-party companies employed by the Company to facilitate the Service.
Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service.
Collecting and Using Your Personal Data
Types of Data Collected
Personal Data
While using our Service, we may ask you to provide certain personally identifiable information that can be used to contact or identify you. This may include:
• Email address
• First name and last name
• Phone number
• Patient information (name, date of birth, Social Security Number, insurance identifiers, Medicaid/Medicare ID) — processed on behalf of tenant NEMT organizations
• Transportation request details and supporting medical documentation
• Usage Data
Usage Data
Usage Data is collected automatically when using the Service and may include your device's IP address, browser type, browser version, pages visited, time and date of visit, time spent on pages, and unique device identifiers.
Use of Your Personal Data
The Company may use personal data for the following purposes:
• To provide and maintain our Service, including monitoring usage
• To manage your account and user registration
• To process and transmit insurance billing claims on behalf of tenant organizations
• To contact you by email, phone, or SMS-based notifications regarding updates and service-related communications
• To manage your requests and support inquiries
• For business transfers in connection with a merger, acquisition, or sale of assets
Sharing Your Information
We do not sell, trade, or otherwise transfer your personal information to outside parties. Your data is stored securely and used solely to provide and improve our services.
We may share your personal data only in the following circumstances:
• With your consent
• To comply with legal obligations
• To protect and defend our rights and property
• To prevent or investigate possible wrongdoing in connection with our services
• With Service Providers (such as AWS, Waystar, and Samsara) under appropriate data processing agreements
SMS opt-in data and phone numbers are used exclusively for communication purposes and will not be shared with third parties or affiliates for marketing.
Our SMS Terms: https://www.echo1solutions.com/sms-terms-and-conditions
HIPAA Compliance
Echo1 is designed for HIPAA-covered entities and business associates handling Protected Health Information (PHI). We maintain a Business Associate Agreement (BAA) with our infrastructure providers. PHI processed through Echo1 is:
• Encrypted in transit (TLS 1.2+) and at rest (AES-256)
• Accessible only to authorized personnel with role-based access controls
• Logged in tamper-evident audit trails
• Never sold or used for marketing purposes
SMS-Based Notifications
The Echo1 application sends SMS-based notifications to users who have opted in. If you opt in to receive these messages, the following applies:
• Message types: dispatch notifications, trip status updates, driver alerts, and operational communications
• Message frequency varies based on dispatch activity and your role
• Standard message and data rates may apply
• Reply STOP to any message to opt out. You will receive a single confirmation and no further messages
• Reply HELP to any message for assistance, or contact us at info@echo1solutions.com
• Your phone number and SMS opt-in data will not be shared with third parties for marketing purposes
Retention of Your Personal Data
We retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, to comply with legal obligations, resolve disputes, and enforce our agreements. Production data backups are retained for a minimum of 30 days. Retention periods may be longer where required by applicable law or regulation.
Security of Your Personal Data
The security of your personal data is important to us. Echo1 implements encryption at rest and in transit, multi-factor authentication, VPC network isolation, GuardDuty threat detection, and regular third-party security assessments. No method of transmission over the Internet or electronic storage is 100% secure. Please contact us immediately at info@echo1solutions.com if you suspect unauthorized access.
Children's Privacy
Echo1 is a B2B platform not directed at individuals under the age of 13. We do not knowingly collect personally identifiable information directly from anyone under 13. Patient records for minors are handled solely at the direction of the tenant NEMT organization.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page with an updated effective date. You are advised to review this Privacy Policy periodically for any changes.
Contact Us
If you have any questions about this Privacy Policy, you can contact us:
By email: info@echo1solutions.com
Echo One Inc
2402 Westport Dr, Norman, OK 73069
Phone: +1 (281) 202-8360
SMS opt-in data and phone numbers collected for communications purposes will not be shared with third parties or affiliates for marketing. By using our services, you acknowledge that you have read and understood this Privacy Policy.