Privacy policy
Two kinds of data pass through this business: information about you as a business contact, and case data about your practice. They are treated differently.
What we collect
| Category | Examples | Why |
|---|---|---|
| Contact data | Name, work email, practice name, state | To respond and to run the account |
| Account data | Login identifiers, role, last login | Access control and audit |
| Case data (PHI) | Pseudonymous case records | To compute your report, under BAA |
| Usage data | Pages viewed, features used | To see what is worth building |
Case data is protected health information and is governed by the executed Business Associate Agreement and our HIPAA page, which control over this policy wherever they differ.
What we do not do
- We do not sell personal information or case data.
- We do not share identifiable data with any third party except with your explicit, per-transaction, written consent.
- We do not use your case data to advertise to you or anyone else.
Benchmarks we publish are aggregated across practices and carry a stated denominator. No practice is identifiable in a benchmark figure.
Service providers
We use vendors for hosting, database, email, and payment processing. Each is bound by contract to handle data only on our instructions, and any vendor touching PHI is under a Business Associate Agreement. Current subprocessor list: SUBPROCESSOR LIST PENDING.
Retention
Contact and account data is retained while your account is active and for RETENTION PERIOD PENDING afterward. Case-level data follows the schedule on the HIPAA page. Computed report snapshots are retained as the longitudinal record unless you ask us to remove them.
Your choices
- Ask what we hold about you and get a copy.
- Correct anything inaccurate.
- Have your data deleted, subject to legal retention obligations.
- Unsubscribe from any email we send, in one click.
Write to PRIVACY EMAIL PENDING or use the contact page.
Cookies
We use the cookies required to keep you signed in and a minimal analytics measure of page views. We do not run third-party advertising trackers. Current analytics provider: ANALYTICS PROVIDER PENDING.
Changes and effective date
If this policy changes materially we will say so on this page and, for account holders, by email. Effective date: EFFECTIVE DATE PENDING.