Healthcare App Privacy & Terms

I need two clear, legally-sound documents for our cloud-based healthcare data integration platform: a full Privacy Policy and a companion Terms of Agreement. Although the app connects to clinical systems, it does not ingest patient charts or insurance details; instead it pulls and stores business owner data—sales and transaction records, employee information, customer interactions, plus supporting financial and marketing metrics uploaded by each clinic that licenses the product. Users actively submit this business data through encrypted APIs, so both documents must spell out collection practices, lawful bases, data retention, breach notification, cross-border transfers, and opt-out mechanisms.

Please craft language that satisfies HIPAA where relevant, GDPR/UK-GDPR, CCPA/CPRA, and standard SaaS best practices. The tone should be professional yet readable for non-lawyers, with clear headings for each section so I can drop the text straight into our website and in-app screens.

Deliverables
1. Privacy Policy – web-ready Word or Google Doc
2. Terms of Agreement – same format, including governing law, service limitations, liability caps, and dispute resolution clause

I’ll review for accuracy and regulatory alignment; once any edits are incorporated the job is complete.