Privacy Policy

1. Information we collect

We collect representative identity and contact details, the documents you upload for credentialing, check-in photos, visit and lunch records, and standard technical logs.

We do not collect Social Security Numbers or Taxpayer Identification Numbers, we do not store criminal background reports, and we do not collect patient information.

2. How we use information

We use your information to review credentials, run exclusion screening, determine facility access, coordinate visits and lunches, and maintain an audit trail.

Contact permissions are recorded per channel. Transactional messages (such as credential status) are sent regardless of marketing preferences; bulk announcements honor your marketing consent and include an unsubscribe option.

3. How information is shared

Facilities you are enrolled with can see your compliance status and the information required to make an access decision. We share information with service providers strictly as needed to operate the platform.

We do not sell your personal information.

4. Data protection

Sensitive information is encrypted, access is tenant-scoped and least-privilege, and audit history is append-only.

Uploaded files stay quarantined until they pass a structural file check, which confirms the bytes parse as the type they claim to be and refuses executable, macro, and launch-action payloads. It is structural validation and not antivirus, so it carries no threat definitions; the Security page describes exactly what it does and does not detect.

5. Retention

Retention is set per record type rather than by a single global period. Credentialing documents and screening adjudications are kept for as long as the facility access decisions that relied on them need to remain auditable; visit, badge, and lunch records are kept for the period the enrolling facility's own compliance obligations require; and audit events are append-only, so they are never edited or deleted.

Where law, a contract, or an active legal hold requires a longer period, that period governs. You can request the retention schedule that applies to your records, in writing, using the contact address below.

6. Your choices and requests

You may request access to or deletion of your personal information, subject to records we are required to retain for audit or legal reasons. Contact us to make a request.