Privacy Policy

What we collect

When you request an assessment link or complete the HIPAA AI Readiness Assessment, we collect practice and contact information (practice name, contact name, work email, practice type, employee count, and similar fields), your answers to the 75 assessment questions, and generated scores and reports. If you purchase add-ons, we record payment status via Stripe (we do not store full card numbers on our servers).

How we use it

We use your data to deliver your assessment results, send transactional emails (assessment invites, purchase receipts, subscription notices) via Resend, process payments via Stripe, and operate outreach you opt into. We do not sell your personal information.

Policy document uploads

Expert Policy Review may involve you sending HIPAA policy documents by email or through a future upload flow. Treat those documents as sensitive; we store them only as needed to deliver the review and delete them per our retention schedule unless you request earlier deletion.

Cookies and analytics

We may use basic analytics (e.g. Vercel Analytics) to understand site usage. We do not use advertising trackers on the assessment flow.

Retention

Assessment data and leads are retained while you use the service and for a reasonable period afterward for support, billing, and legal compliance. You may request deletion of your assessment and contact records by emailing assessments@hipaa-assessment.com.

Contact

Questions about this policy or your data: assessments@hipaa-assessment.com