Legal
Privacy Policy
Last updated: June 2026
1. What Information We Collect
We collect information you provide when registering your organization, including organization name, administrator name, and email address. We collect volunteer information you enter or import, including names, email addresses, phone numbers, and service history. We collect usage data to improve the Platform.
2. How We Use Your Information
We use your information to provide and improve the Platform, to send account-related communications including activation notifications and support responses, and to generate aggregate platform analytics that help us improve the service. We do not use your volunteer data for marketing purposes.
3. Data Storage and Security
Your data is stored in Supabase, a secure cloud database provider. All data is encrypted in transit and at rest. Your organization's data is isolated from other organizations through row-level security controls. OpenAI API keys are stored using AES-256-GCM encryption.
4. Data Sharing
We do not sell, rent, or share your personal information or your organization's data with third parties except as required by law or as necessary to provide the service, for example email delivery through Resend.
5. Third-Party Services
The Platform uses the following third-party services: Supabase for database and authentication, Vercel for hosting, Resend for email delivery, and OpenAI for AI-powered features. Each operates under its own privacy policy. Your use of the OpenAI integration is subject to OpenAI's privacy policy.
6. Document Uploads
Documents you upload to the knowledge base are stored securely and used only to power your organization's chatbot. Documents are not shared with other organizations or used to train AI models.
7. Cookies and Analytics
The Platform uses cookies necessary for authentication and session management. We do not use advertising cookies or behavioral tracking.
8. Data Retention
We retain your data for as long as your account is active. Upon account termination, data is deleted within 30 days upon request.
9. Your Rights
You may request access to, correction of, or deletion of your organization's data at any time by contacting us at John.Mills.cliniccoach@gmail.com. We will respond within 10 business days.
10. Children's Privacy
The Platform is not directed at individuals under the age of 18 and we do not knowingly collect information from minors.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email. Continued use of the Platform constitutes acceptance of the updated Policy.
12. Contact
Privacy questions or data requests: John Mills at John.Mills.cliniccoach@gmail.com.
Questions? Contact us or review our Terms of Service.