Privacy Policy

We help small healthcare practices take HIPAA seriously, so we hold ourselves to a high standard for how we handle your information too. We collect as little as we need, we tell you plainly what it's for, and we don't sell it. What follows is the formal version of that promise.

SeccureMD ("we," "us," or "our") helps solo physicians, therapists, dentists, chiropractors, med spas, and similar small healthcare practices stay on top of HIPAA compliance. This Privacy Policy explains what information we collect through seccuremd.com (the "Site"), how we use it, and the choices you have.

1. Information We Collect

We collect information in the following ways:

• Waitlist signup.If you submit your email through our "Notify me" form, we collect that email address.
• Free HIPAA assessment. If you take our free assessment, we collect your responses to the assessment questions, the resulting compliance score, and the email address you provide to receive your results.
• Marketing consent. Before we add your email to our marketing list, we ask you to actively check a consent box. We only send marketing emails to addresses where this box was checked.
• Technical information.Like most websites, our hosting infrastructure automatically logs standard technical data (such as IP address, browser type, and device information) for security and operational purposes. We don't currently use cookies, analytics scripts, or advertising trackers on the Site.

This marketing site does not collect or store Protected Health Information (PHI) or any patient data. The assessment only asks about your practice's own compliance posture, not about your patients.

2. How We Use Your Information

We use the information we collect to:

• Generate and deliver your free HIPAA assessment results by email
• Notify you when SeccureMD launches, if you joined the waitlist
• Send product updates and marketing communications, but only to addresses that opted in
• Maintain, secure, and improve the Site
• Respond to your questions or requests when you contact us

We don't sell your personal information, and we don't use it for third-party advertising.

3. Cookies and Tracking Technologies

The Site does not currently use cookies, analytics platforms, or advertising pixels. If that changes (for example, if we add product analytics), we'll update this section to explain what we use and, where required, give you a way to manage your preferences.

4. How We Share Your Information

We share information with a small number of service providers who help us run the Site, under agreements that limit how they can use your data. These currently include:

• Supabase, which hosts our database and stores assessment responses and account data. Supabase Privacy Policy
• Vercel, which hosts the Site and its infrastructure. Vercel Privacy Policy
• Resend, which delivers your assessment report and other transactional emails. Resend Privacy Policy
• Loops, which delivers marketing emails, and only to contacts who opted in. Loops Privacy Policy

We may also disclose information if required by law, or to protect the rights, property, or safety of SeccureMD, our users, or others.

5. Data Retention

• Waitlist emails are kept until you unsubscribe or ask us to delete them.
• Assessment responses and results are kept for as long as your account stays active, or up to 24 months of inactivity, whichever comes first.
• Marketing consent recordsare kept for as long as you're subscribed, so we can honor your opt-in and opt-out choices.

You can ask us to delete your data sooner at any time using the contact information below.

6. Your Privacy Rights and Choices

Depending on where you live, you may have rights to access, correct, or delete your personal information, or to opt out of certain uses of it. Regardless of where you live, you can always:

• Unsubscribe from marketing emails using the link in any email we send
• Request access to or deletion of your data by contacting us at the email below
• Ask us to correct inaccurate information we hold about you

We honor the Global Privacy Control (GPC) browser signal as a valid opt-out request where recognized by law, even though we don't currently use the kind of tracking that signal is meant to stop. We'll respond to verified requests within 30 days.

7. Age Restrictions

The Site is meant for healthcare practice owners and staff, not children. We don't knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, please contact us and we'll delete it.

8. Data Security

We use reasonable technical and organizational measures to protect the information we collect. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Data Breach Notification

If a data breach affects your personal information, we'll notify you without undue delay and consistent with applicable state and federal law, and we'll report the breach to the relevant regulators within the timelines those laws require.

10. Links to Other Sites

The Site may link to third-party websites, including our future platform at app.seccuremd.com. Those sites have their own privacy policies, and we encourage you to review them.

11. Changes to This Policy

We may update this Privacy Policy from time to time, especially as we launch new features. We'll update the "Last updated" date above when we do, and we'll post a notice on the Site if the changes are significant.

12. Contact Us

If you have questions about this Privacy Policy or want to exercise any of the rights described above, reach us at privacy@seccuremd.com.