A trade name of VLS Capital Enterprises, LLC, a Wyoming limited liability company
Effective Date: September 22, 2026 Last Updated: September 22, 2026
CareWise AI Consulting Group (“CareWise AI,” “CareWise,” “we,” “us,” or “our”) is a trade name of VLS Capital Enterprises, LLC, a Wyoming limited liability company.
We provide artificial intelligence (“AI”) consulting, AI voice receptionist implementation and management, automation, custom AI agents, AI-generated marketing content, and educational workshops.
We specialize in healthcare but are not limited to healthcare. We serve medical and dental practices, med spas, chiropractors, veterinary practices, and other healthcare businesses, and we also serve service businesses and small businesses in any industry. The HIPAA-specific provisions of this Policy, including Section 8, apply only where a client engagement involves protected health information.
This Privacy Policy explains how we collect, use, disclose, store, and protect information when you:
• Visit our website at www.carewiseaigroup.com or any landing page, funnel page, or booking page we operate;
• Call, text, or email us, including when you speak with our AI voice receptionist;
• Register for, attend, or purchase a workshop, course, or digital product;
• Become a prospective client, client, vendor, or referral partner;
• Interact with our social media profiles or Google Business Profile.
By accessing our website, submitting information to us, communicating with us, or using our services, you acknowledge the practices described in this Privacy Policy.
Please read Section 4 carefully. We handle two very different categories of information, under two different sets of rules.
Contact information for all matters described in this Policy:
VLS Capital Enterprises, LLC CareWise AI Consulting Group 30 N. Gould Street, Suite R Sheridan, WY 82801 United States
Phone: 843-380-5159 General inquiries: [email protected] Service and billing: [email protected] Privacy and data requests: [email protected] Website: www.carewiseaigroup.com
What
Short Answer
Do we sell your personal information?
No. We do not sell or share personal information for cross-context behavioral advertising.
Do we record calls?
Yes. Calls to and from our business lines, including our AI receptionist, may be recorded and transcribed. You are notified at the start of the call.
Do we use AI?
Yes. Our voice receptionist is an artificial intelligence system, and it identifies itself as such.
Do we handle health information?
Sometimes, on behalf of healthcare clients, and only under a Business Associate Agreement.
Is this an emergency service?
No. See Section 7.
Can you opt out of marketing?
Yes, at any time. See Section 15.
Who do we share data with?
Our technology vendors, listed in Section 11.
The information we collect depends on how you interact with CareWise AI.
• Identity and contact information: name, email address, telephone number, business or organization name, job title, business website, business address.
• Business information: practice type, number of locations, current phone system, call volume, staffing, operational pain points, and similar details shared during a discovery call, consultation, demonstration, or intake form.
• Booking information: appointment date and time, time zone, meeting purpose, and any notes you provide.
• Workshop and event information: registration details, accessibility or dietary needs you choose to share, workbook responses, and questions submitted during a session.
• Transaction information: billing name and address, service purchased, and payment confirmation details. See Section 12.
• Correspondence: emails, text messages, voicemails, chat messages, social media messages, customer-support communications, feedback, and survey responses.
• Any other information you choose to provide.
When you access our website or digital services:
• Internet Protocol (“IP”) address and approximate geographic location derived from it;
• Browser type, device type, operating system, and screen size;
• Pages visited, links clicked, time on page, and referring website;
• Date and time of access and website interaction data, including partially completed forms;
• Cookie identifiers, analytics, and performance information.
See Section 13 regarding cookies and your choices.
• Publicly available business information: business name, address, phone number, website, listed staff, and hours, obtained from directories, search engines, professional associations, and business listings, used to identify and contact prospective business clients.
• Referral partners: if a partner, chamber of commerce, colleague, or existing client refers you, we may receive your name, business, and contact information from them.
• Platform and advertising vendors: aggregate or individual analytics about how you found us.
We do not seek out, and ask you not to send us: Social Security numbers, driver’s license numbers, government identification numbers, financial account credentials, biometric identifiers, or detailed personal health information about yourself. If you send such information to us unsolicited, we will delete it unless we are legally required to retain it.
This distinction matters and we want it stated plainly.
When you contact us about our services, register for a workshop, subscribe to our emails, book a consultation, or become our client, we decide how that information is used. This Privacy Policy governs that information.
When we build, configure, host, or manage an AI voice receptionist, automation workflow, or customer relationship management system for a business client, that client’s customers and patients may interact with the system we built. In that situation:
• The client — not CareWise — is the controller of that information. The client’s own privacy policy and Notice of Privacy Practices govern how it is used.
• We act only as a service provider (and, where the client is a HIPAA covered entity, as a business associate).
• We process that information only to deliver the services our client has engaged us to provide, and only as permitted by our written agreement with that client.
• We do not use that information for our own marketing, do not sell it, and do not combine it with our own marketing databases.
• If you are a patient or customer of one of our clients and want your information deleted or corrected, please contact that business directly. We will support their request, but we cannot act on our own initiative regarding data we hold for them.
CareWise AI provides AI-powered voice receptionist and related automation services to business clients. Depending on the configuration selected by a client, an AI voice receptionist may collect, process, generate, transmit, or store:
• Caller name, telephone number, and email address;
• Reason for calling and the nature of the inquiry;
• Appointment requests, dates, and times;
• Call recordings, call transcripts, and AI-generated call summaries;
• SMS and follow-up communications;
• Lead and scheduling information;
• Other information voluntarily provided during a telephone conversation.
The specific information collected depends on the services configured by the business using the CareWise AI solution.
CareWise configures outbound calls and text messages only for transactional and informational purposesrelating to an existing appointment or an existing request from the individual contacted — appointment reminders, confirmations, rescheduling, missed-appointment follow-up, pre-visit instructions, returning a requested call, and administrative notices.
CareWise does not build, configure, or operate outbound calling or texting for promotional, marketing, or advertising purposes, including patient reactivation, recall, win-back, or lapsed-list campaigns, promotional offers, lead generation, or cold outreach. We decline this category of work as a matter of scope, regardless of a client’s consent documentation.
Outbound communications we configure identify the business, disclose that the caller is an automated or AI assistant, are placed only between 8:00 AM and 9:00 PM in the recipient’s local time, and provide a means to opt out. Business clients remain responsible for holding valid prior express consent for each individual contacted and for honoring revocations.
AI voice agents operate only in the language or languages configured for a given deployment and are not a substitute for qualified interpreters, TTY/TDD, telecommunications relay services, or other auxiliary aids and services.Business clients subject to Section 1557 of the Affordable Care Act, the Americans with Disabilities Act, or comparable requirements remain responsible for ensuring that individuals with limited English proficiency or with disabilities have meaningful access, including by maintaining a path to a human representative.
Calls to CareWise’s own business line. Our AI voice receptionist discloses at the start of the call that it is an artificial intelligence assistant and that the call may be recorded. We provide recording notice and obtain consent as required by applicable law, which varies by state — some states require the consent of all parties to a recorded call. If you prefer not to be recorded, please tell us so during the call, or end the call and reach us instead at [email protected]. We generate and retain an audio recording, a written transcript, and a summary, used to schedule appointments, respond to your inquiry, maintain accurate business records, train our staff, and improve our systems.
We may also record or take notes on outbound calls we place. Where we do so, we provide notice at the beginning of the call and obtain consent as required by applicable law.
Calls to systems we build for clients. Calls handled through client AI voice systems may be recorded, transcribed, analyzed, or summarized where permitted by applicable law and according to the configuration and instructions of the applicable business client. Businesses using CareWise AI services are responsible for implementing the notices, disclosures, and consent mechanisms required by applicable federal and state law regarding call recording, transcription, monitoring, and automated communications. Some states require the consent of all parties to a recorded call. CareWise implements technical or verbal disclosures where included in the applicable service configuration, but the client determines and remains responsible for legal sufficiency.
CareWise AI uses artificial intelligence and automated technologies to provide certain services. AI systems may process information to:
• Answer telephone calls and understand caller requests;
• Respond to frequently asked questions;
• Route or transfer calls;
• Collect contact information;
• Assist with appointment scheduling;
• Generate call summaries and transcripts;
• Initiate approved follow-up communications;
• Categorize inquiries and support administrative workflows;
• Perform other functions configured by our clients.
AI systems are not perfect. They may misunderstand speech, mishear names or numbers, interpret information incorrectly, generate inaccurate information, or fail to complete a requested action. This applies to all AI-generated output, including synthesized voice, transcripts, summaries, messages, automation outputs, and generated text, images, audio, or video. CareWise designs its systems to support business operations, not to replace appropriate human judgment.
We do not train AI models on your information. We do not use call recordings, transcripts, call summaries, contact records, business data, or protected health information to train, fine-tune, or otherwise improve any general-purpose or third-party artificial intelligence model. Regarding our vendors: we select AI, voice, and platform providers whose terms or business-tier settings provide that customer data is not used to train their models, and where PHI is involved we require a business associate agreement restricting use of that information to providing the service. Vendor terms and settings are controlled by those vendors and may change, and we do not guarantee the practices of any third-party provider. Information is used to operate the specific deployment it belongs to. Aggregated and de-identified performance information may be used to improve our services.
Our AI systems do not present themselves as licensed professionals. Agents we configure are not named, scripted, or presented in a way that states or implies the agent is a nurse, physician, therapist, or other licensed healthcare professional, or that it is a human being.
We do not use AI outputs to make legally significant decisions about individuals. Our AI systems schedule, route, answer questions, and gather information. They do not determine eligibility for services, credit, employment, insurance, or healthcare treatment.
We do not clone or replicate any individual’s voice without that individual’s separate written consent.
CAREWISE AI SERVICES ARE NOT EMERGENCY SERVICES.
CareWise AI systems are not a substitute for 911, emergency medical services, emergency departments, law enforcement, crisis services, or other emergency response systems.
Individuals experiencing a medical emergency or other immediate threat to health or safety should contact the appropriate emergency service directly.
CareWise does not guarantee that an AI system will recognize, appropriately interpret, route, or respond to an emergency communication.
CareWise AI provides services to healthcare organizations and other businesses that may be subject to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”).
When CareWise creates, receives, maintains, or transmits Protected Health Information (“PHI”) on behalf of a HIPAA covered entity or another business associate, CareWise acts as a Business Associate as defined under HIPAA.
• A Business Associate Agreement (“BAA”) is executed before any PHI is created, received, maintained, or transmitted. The BAA governs the use, disclosure, protection, and handling of that PHI and controls over any conflicting provision of this Privacy Policy.
• We maintain a signed BAA with our underlying platform provider covering the infrastructure on which client systems run.
• The healthcare organization remains responsible for its own HIPAA compliance and for determining what information its AI receptionist may appropriately collect or process.
• We do not use PHI obtained on behalf of healthcare clients for unrelated advertising or marketing purposes.
CareWise AI voice receptionists are designed for administrative purposes only, including appointment scheduling, call routing, general business information, and other non-clinical functions.
CareWise AI systems are not designed to diagnose medical conditions, recommend treatment, interpret symptoms, prescribe or recommend medications, provide clinical advice, or make medical decisions.
If a caller attempts to discuss symptoms, medications, medical history, urgent clinical concerns, or other matters requiring professional medical judgment, the AI system may be configured to transfer or escalate the communication to an appropriate human representative.
Callers should not rely on a CareWise AI system for medical advice. No provider-patient relationship is created by any interaction with CareWise, our website, our AI systems, or our personnel.
To provide services: respond to inquiries; schedule and conduct consultations and demonstrations; build, configure, deploy, monitor, and maintain AI systems and workflows; deliver workshops, courses, workbooks, and digital products; provide technical support and troubleshooting.
To operate our business: process transactions; maintain client accounts and business records, including recordings and transcripts; prepare proposals, statements of work, and agreements; track project status and deliverables.
To communicate with you: send transactional and administrative messages, including booking confirmations, reminders, receipts, and service notices; send marketing and educational communications where permitted by law; send text messages where you have separately opted in.
To improve what we offer: analyze call transcripts and outcomes to improve agent scripts, knowledge bases, and workflows; analyze website and campaign performance; develop new service offerings and educational content.
To protect and comply: monitor system performance and maintain security; detect, prevent, and investigate fraud, abuse, and misuse; enforce our agreements; comply with legal obligations, subpoenas, court orders, and regulatory requests; establish, exercise, or defend legal claims.
We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act, as amended.
We have not sold or shared the personal information of consumers under 16 years of age.
We use vendors who process information on our instructions and are contractually restricted from using it for their own purposes. Our current categories of vendors include:
Category
Purpose
CRM, marketing automation, and telephony platform
Contact management, calendars, call routing, email and SMS delivery, form hosting
AI and voice technology providers
Speech recognition, natural language processing, voice synthesis, transcription
Payment processor
Payment collection and receipts
Website hosting and analytics providers
Site hosting, traffic analytics
Email, cloud storage, and productivity providers
Business email, document storage, calendar
Video conferencing provider
Virtual consultations and workshops
Professional advisors
Accountants, attorneys, insurers, bound by confidentiality
A current list of named subprocessors is available on request at [email protected]. Where PHI is involved, CareWise executes a business associate agreement with the vendor before any PHI is made available to them, as HIPAA requires. We also seek vendors whose terms or business-tier settings provide that information processed for us is not used to train their models, though vendor terms are set by those vendors and may change.
We may also disclose information: at the direction of a client; with your consent; to comply with legal obligations; in response to lawful subpoenas, court orders, or government requests; to protect our rights, property, systems, clients, or users; to investigate fraud, abuse, security incidents, or unlawful activity; and in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar business transaction, subject to applicable law and contractual restrictions.
We may create and share aggregated or de-identified information — for example, “practices in this vertical miss an average of X percent of inbound calls after hours” — that cannot reasonably be used to identify you. We will not attempt to re-identify such information.
Client case studies and testimonials: we will not identify you or your business by name in marketing materials without your prior written permission.
CareWise uses third-party payment processors, including Stripe and payment functionality available through our business technology platform, to process payments.
CareWise does not store complete payment card numbers or bank account credentials on our systems when payment is processed by an authorized third-party processor. We receive confirmation of payment, the last four digits of a card, and billing name and address.
Payment providers collect and process information pursuant to their own privacy policies and security practices.
We and our vendors use cookies, pixels, local storage, and similar technologies to operate our site, remember your preferences, measure traffic, and evaluate marketing performance.
Your choices:
• Most browsers let you block or delete cookies through their settings. Blocking cookies may impair site functionality.
• We honor the Global Privacy Control (GPC) signal where required by law as a valid opt-out request.
• We do not currently respond to browser “Do Not Track” signals, as no common standard has been adopted.
Type of Information
Retention Period
Prospect inquiry and lead data
Up to 3 years from last interaction, unless you request deletion sooner
Call recordings and transcripts (our own business line)
12 months, unless part of an active matter
Client account, project, and configuration records
Term of the engagement plus 6 years
Financial and tax records
7 years, as required by law
Workshop registration data
3 years
Marketing email lists
Until you unsubscribe, plus a suppression record retained indefinitely so we do not contact you again
Client business data after termination (recordings, transcripts, contacts, messages)
Available for export for 30 days after termination, then may be permanently deleted
Client knowledge base and agent configuration (business content, no personal information)
May be retained at our discretion for up to 90 days after termination; no retention is guaranteed
Caller personal information after termination (recordings, transcripts, summaries, contact records, messages)
Not kept by us for our own purposes after the 30-day export window; deleted or returned per the applicable agreement
Data processed for clients
As specified in the applicable client agreement or BAA; returned or destroyed at termination per its terms
The periods above describe our own practices and the systems we administer. Third-party platforms, carriers, and infrastructure providers maintain their own backups, logs, and retention schedules, which we do not control, so we cannot guarantee immediate or complete deletion across every system involved in delivering a service. Where a Business Associate Agreement applies, its return-and-destruction terms control.
Upon termination of a client engagement, we may disable integrations, disconnect services, and delete, return, de-identify, or otherwise dispose of information in accordance with applicable law, our contractual obligations, any applicable Business Associate Agreement, and our data-retention practices. We do not guarantee that configurations, telephone numbers, integrations, workflows, recordings, transcripts, call summaries, or other materials will remain available following termination.
We may retain information longer where required by law, or where necessary to establish, exercise, or defend legal claims. Retention may also be affected by the technical settings and capabilities of the platforms on which a client’s system runs.
Email marketing. Every marketing email contains an unsubscribe link. You may also email [email protected] with “Unsubscribe” in the subject line. We honor requests promptly, and in all cases within 10 business days. Unsubscribing from marketing does not stop transactional or administrative messages relating to services you have purchased.
Text messages. Where SMS is offered, messages are sent in accordance with the consent obtained for that communication. Consent to receive marketing text messages is not a condition of purchasing CareWise services.Reply STOP to opt out or HELP for assistance. Message and data rates may apply. Message frequency varies. We do not sell or share mobile numbers with third parties for their marketing.
Telephone. You may ask to be placed on our internal do-not-call list at any time by telling any representative or by emailing us. We maintain that list and honor the National Do Not Call Registry as applicable.
Call recording. If you prefer not to be recorded, end the call after the disclosure and contact us in writing instead.
Cookies. See Section 13.
Depending on where you reside, applicable law may give you some or all of the following rights:
• Right to know / access the categories and specific pieces of personal information we have collected, the sources, our purposes, and the categories of third parties to whom we disclosed it;
• Right to correct inaccurate personal information;
• Right to delete personal information, subject to exceptions;
• Right to opt out of sale, sharing, or targeted advertising (note: we do not engage in these);
• Right to limit the use of sensitive personal information;
• Right to data portability;
• Right to withdraw consent previously given;
• Right to non-discrimination for exercising your rights;
• Right to appeal a denial of your request, where your state provides one.
These rights are subject to exceptions and limitations under applicable law, and not every privacy law applies to every business.
How to submit a request. Email [email protected] with the subject line “Privacy Request,” and tell us what you are requesting and enough information for us to locate your records. You may also write to us at the mailing address in Section 22.
Verification. We will take reasonable steps to verify your identity before acting, typically by matching information you provide against our records, or by confirming through the email address or phone number already associated with your record. We will not create new accounts or collect additional identification solely to verify you where avoidable.
Timing. We will confirm receipt within 10 business days and respond substantively within 45 days. We may extend once by an additional 45 days with notice to you.
Authorized agents. An agent may submit a request on your behalf with written authorization signed by you. We may contact you directly to confirm.
Requests concerning data we hold for a client. If your request concerns information collected by an AI receptionist or other system operated on behalf of a healthcare provider or other CareWise client, submit the request directly to that organization, which controls the information. CareWise will assist its client in responding where required by contract or applicable law.
California residents may have additional rights under the California Consumer Privacy Act, as amended.
Not every California privacy law applies to every business. Whether CCPA applies to CareWise depends on statutory thresholds relating to revenue and the volume of personal information handled. Where CCPA applies to us, we honor the rights it provides. Where it does not, we will still respond to requests from California residents on the terms described in Section 16.
In the preceding 12 months, we have collected the following categories of personal information: identifiers; commercial information; internet or other electronic network activity; audio and electronic information (call recordings and transcripts); professional or employment-related information; geolocation approximated from IP address; and inferences drawn from the above. Sources, purposes, and disclosure recipients are described in Sections 3, 9, and 11.
We have not sold or shared personal information in the preceding 12 months.
CareWise will not unlawfully discriminate against an individual for exercising an applicable privacy right. California residents may also request information under the “Shine the Light” law about disclosures to third parties for their direct marketing purposes; we make no such disclosures.
California residents may submit requests using the contact information in this Privacy Policy.
CareWise maintains administrative, technical, and organizational measures appropriate to the size of our operation and the sensitivity of the information we handle. Our current practices include:
• unique credentials and multi-factor authentication on business-critical accounts where the platform supports it;
• limiting access to client data to personnel who need it to deliver the services, and promptly removing access that is no longer needed;
• written agreements with vendors that process information on our behalf, including business associate agreements where PHI is involved;
• reliance on encryption in transit and at rest as provided by the platforms on which client deployments run;
• device security on the equipment we use, including screen locks, disk encryption, and current software updates.
We do not currently hold a SOC 2, HITRUST, or ISO 27001 certification, and we do not claim one. Security controls for data held in client deployments are also governed by the platforms and providers involved.
However, no internet transmission, telephone system, cloud platform, AI system, or electronic storage method can be guaranteed to be completely secure, and CareWise cannot guarantee absolute security. Please do not send sensitive personal or health information to us by unencrypted email or text message.
Clients are also responsible for maintaining appropriate account security, passwords, access controls, staff permissions, and internal safeguards.
If a breach of unsecured personal information or PHI occurs, we will notify affected individuals, our clients, and regulators as required by applicable state law, the HIPAA Breach Notification Rule, and the terms of any applicable BAA.
Businesses using CareWise services remain responsible for their own privacy practices and legal obligations, including:
• Providing legally required privacy notices and Notices of Privacy Practices;
• Obtaining legally required consent;
• Determining whether call recording is permitted in the applicable jurisdictions and providing appropriate call-recording disclosures;
• Obtaining appropriate SMS consent and meeting carrier registration requirements;
• Maintaining HIPAA compliance where applicable;
• Configuring appropriate escalation and emergency procedures;
• Limiting the information collected through AI systems where appropriate;
• Ensuring that their use of CareWise services complies with applicable law, including telecommunications, telemarketing, and consent requirements.
This Privacy Policy does not replace a client’s own privacy policy or Notice of Privacy Practices.
Our website and commercial services are directed to businesses and business professionals, not to children. We do not knowingly collect personal information directly from children under 13 through our website, and we do not knowingly market to anyone under 18.
Our business clients, including healthcare organizations, may serve minors. Information processed through an AI receptionist on behalf of such a client is governed by that client’s relationship with the individual, applicable law, and the agreement between CareWise and the client.
If you believe a child has provided us information directly, contact us and we will delete it.
Our website, emails, and materials may link to third-party websites, scheduling tools, payment pages, and platforms we do not control. CareWise is not responsible for the privacy practices, content, security, or policies of third parties. Review their privacy policies before providing information.
We are based in the United States and our vendors process information primarily in the United States. Some vendors may process or store information in other countries. If you access our services from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your jurisdiction.
We may update this Privacy Policy periodically to reflect changes in our business, technology, services, or legal obligations. When changes are made, the “Last Updated” date at the beginning of this Privacy Policy will be revised. If we make material changes, we will provide additional notice by email or by a prominent notice on our website before the changes take effect, where required by law. Continued use of our services after the effective date constitutes acknowledgment.
Questions or requests regarding this Privacy Policy may be directed to:
CareWise AI Consulting Group A trade name of VLS Capital Enterprises, LLC 30 N. Gould Street, Suite R Sheridan, WY 82801 United States
Phone: 843-380-5159 General inquiries: [email protected] Service and billing:[email protected] Privacy and data requests: [email protected] Website:www.carewiseaigroup.com
We will respond to privacy inquiries within 10 business days.