Provider will help Client build and automate marketing systems for BioDynamic Health: lead-capture funnels, automated email/SMS nurture, the discovery-call flow and state-gate, member-onboarding automations in GoHighLevel, and a content/clip pipeline. Luis Carrillo supports video and content under Provider.
A "session" is one scheduled working block (about 60 minutes) where Provider and Client fix or build at least one item. Ideal cadence: one meaningful problem solved per week, minimum.
| Item | Terms |
|---|---|
| Fee | $600 / month, billed in advance via the Provider payment link. |
| Nature | Short-term, setup-focused. Not an indefinite retainer. Re-quoted month to month; either party may stop at a month boundary. |
| Start of work | Build work begins after the first payment clears and this packet is signed. |
| Out-of-scope | Paid ad spend, third-party tool/subscription costs, and net-new product creation (e.g., the Gut Restore program build) are separate and quoted before work. |
Because this is short-term, every automation Provider builds will include a plain-English runbook so Client (or a Client-designated operator) can run it after the engagement. Client is responsible for naming who operates the systems afterward.
This engagement is marketing and automation only. Provider will work with leads, funnels, calendars, pipelines, and non-clinical fields. Provider will not access, process, or build with Protected Health Information (PHI) — patient charts, clinical notes, diagnoses, treatment data, or patient message threads — unless and until the Business Associate Agreement in Part 2 is signed and the necessary safeguards are in place. (See Part 2.)
Each party will keep the other's non-public business information confidential and use it only to perform this engagement.
Standard HIPAA Business Associate Agreement, adapted from the U.S. Department of Health & Human Services sample. "Covered Entity" = Vincent Petronelli, ARNP / BioDynamic Health. "Business Associate" = Andre "Drey" Thomas (and its subcontractor Luis Carrillo).
This BAA governs any Protected Health Information (PHI) that Business Associate may create, receive, maintain, or transmit on behalf of Covered Entity while performing the services in Part 1. If Business Associate never receives PHI, its PHI obligations simply never trigger — but this Agreement is in place to protect both parties if PHI is ever touched.
Business Associate will ensure any subcontractor (including Luis Carrillo) or any tool/vendor that handles PHI on its behalf agrees in writing to the same restrictions and conditions, via its own written agreement. Business Associate will not route PHI through any AI service, automation platform, or vendor that has not agreed to equivalent protections.
Business Associate will report to Covered Entity any use or disclosure of PHI not permitted by this Agreement, and any Security Incident or Breach of unsecured PHI, without unreasonable delay and within [5 business days] of discovery.
To the extent Business Associate holds PHI in a Designated Record Set, it will make it available to Covered Entity (or the individual) for access, amendment, and accounting of disclosures as HIPAA requires.
Business Associate will make its internal practices, books, and records relating to PHI available to the Secretary of HHS for determining Covered Entity's HIPAA compliance.
Nothing here creates rights for any third party. Any ambiguity is interpreted to permit compliance with HIPAA.
By signing (or by checking the agreement box on the payment page and completing payment), both parties accept Part 1 (SOW) and Part 2 (BAA).