Privacy Policy
Effective June 11, 2026. What we collect, why, and who touches it — in plain language.
1. What we collect
- Contact & audit requests: name, email, clinic name and website when you request an audit or contact us. Used to produce your report and reply.
- Customer account data: billing contact, service configuration, and the access you grant us (e.g. website, Google Business Profile) — used solely to deliver the service you bought.
- Basic technical data: standard server logs (IP, user agent) processed by our hosting provider for security and uptime. We do not run invasive ad trackers on this site.
2. What we don’t do
We don’t sell your data. We don’t buy contact lists. We don’t use your data for anything beyond delivering and improving the service. Marketing emails are only sent to people who asked to hear from us, and every one has an unsubscribe link.
3. Patient data & HIPAA
Our website and audit forms are not designed to collect patient health information — please don’t submit any. Where our work for a clinic involves systems that may touch patient data (e.g. call tracking), we sign a Business Associate Agreement (BAA) with that clinic and handle the data according to it.
4. Who processes data on our behalf
- Cloudflare — hosting, security, and data storage for this site.
- Paddle — payments, as Merchant of Record. Paddle processes your billing details under its own privacy policy; we never see your full card number.
- Resend — transactional email delivery (reports, receipts, reminders).
- Search & AI data providers (e.g. Google APIs, SERP data services) — used to measure visibility of your clinic; they receive your clinic’s public business details, not personal data of your patients.
5. Retention
We keep audit and lead data while it’s relevant to serving you, and customer records for as long as you’re a customer plus what tax/accounting law requires. Ask us to delete your data and we will, unless a legal obligation says otherwise.
6. Your rights
You can ask what data we hold about you, ask us to correct it, export it, or delete it. Depending on where you live (e.g. GDPR in the EU/UK, CCPA in California), you may have additional statutory rights — we honor reasonable requests regardless of geography. Email [email protected].
7. Changes & contact
If this policy changes materially, we’ll note it here with a new effective date and email active customers. Questions: [email protected].