Privacy Policy

The short version

• We collect what we need to run your account and bill your plan: your name, work email, organization name, a hashed password, and what you do in the tools.
• We do not collect or store client records, and we ask you not to put protected health information into this Site.
• We do not sell personal information and we do not use your inputs to train AI models.

What we collect

• Account details: name, work email, organization, password (stored only as a salted hash), plan and billing status.
• Payment: handled by Stripe. We never see or store your card number; we store Stripe’s customer and subscription identifiers so we can show your plan and open the billing portal.
• Use of the tools: what you type into the AI template builder and group-note writer and the drafts they return; referral-finder searches (the plan and the city, state and ZIP; the street address is used to center the search and is not stored); training progress; service requests you send us.
• Technical: standard server logs (IP address, browser, pages requested, timestamps) kept briefly for security and troubleshooting. We set one cookie, to keep you signed in. No advertising cookies or trackers.

How we use it

• To provide the Site: sign you in, show your plan, generate drafts, build referral lists, record training, store your downloads history.
• To bill you through Stripe and respond to requests.
• To keep the Site secure and fix problems.
• To tell you about changes to the Site, your plan or these policies. We send marketing email only if you opted in, and every such email has an unsubscribe link.

AI processing

Drafts from the AI template builder and group-note writer are generated by a third-party AI provider under terms that prohibit using the data to train models. Your inputs and the drafts are kept in your account so you can reopen them. Do not include protected health information; the Site is not a system of record for client data and is not covered by a business associate agreement.

Who else sees it

• Stripe for payments (its own privacy policy applies).
• Cloudflare, which hosts the Site and its database.
• The AI provider, for the text you submit to the AI tools.
• Firecrawl and public directories (Zocdoc, Psychology Today, payer directories, the NPI Registry, CMS) when the referral finder runs a search; they receive the search terms, not your account details.
• Nobody else, except when the law requires it or to protect the Site and its users.

Where it is kept and for how long

Data is stored in the United States. We keep account data while your account exists and for up to 12 months after it closes, then delete it, except billing records we must keep for tax and accounting. You can ask us to delete your account and its data sooner.

Your choices and rights

• See, correct or export your account data: email us.
• Delete your account: cancel your plan, then email us and we will delete it.
• California residents have the rights described in the CCPA, including to know what we collect, to delete it, and not to be discriminated against for exercising those rights. We do not sell or share personal information for advertising. To exercise a right, email us; we verify requests through the email on the account.

Security

Passwords are hashed, traffic is encrypted in transit, sign-in is rate-limited, and only the account owner and the people they add can see an organization’s data. No system is perfectly secure; if we learn of a breach affecting your data we will tell you promptly.

Children

The Site is for professionals and is not directed to anyone under 18.

Changes

We may update this policy. The date at the top shows the current version. Material changes are announced on the Site or by email.

Contact

Marisnick Labs, LLC · support@treatmentcentertools.com