DRAFT, not legal advice. Fill in the bracketed details and have a lawyer review this page. Then delete this box (the paragraph with id="draft").

Privacy Policy

Last updated: [DATE]

This policy explains what [BUSINESS NAME] ("we") collects through FillOnce and how it's used.

What we collect

Account information: email address and password (passwords are stored hashed by our authentication provider, never readable by us). Practice information you enter: practice and provider credentialing details such as names, addresses, tax ID, NPI numbers, license, DEA, malpractice, board certification and CAQH details, payer enrollments, vendors and supplies. Billing: handled by Stripe; we receive your subscription status and customer ID, never your full card number. Basic technical data: logs our hosting providers keep to run and secure the service.

What we don't collect

FillOnce is not designed for patient records. Patient details typed into the Letters screen stay in your browser and are never saved. We don't collect Social Security numbers or dates of birth, and we ask you not to enter them.

How we use it

Only to provide and support FillOnce: storing your information, showing it to people you give access to, sending account emails (confirmation, password reset), and processing your subscription. We don't sell your information or use it for advertising.

Who can see it

Only the people your practice owner gives access to. Other practices can't see your data. We access it only when needed to support you, secure the service, or comply with the law.

Service providers

Supabase (database and sign-in), Cloudflare (website hosting), Stripe (payments), and [EMAIL PROVIDER, e.g. Google] (account emails). Each processes data only to provide its service to us.

Security

Data is encrypted in transit, and access rules in the database keep each practice's data separate. No system is perfectly secure; we'll notify affected customers of a breach as required by law.

Retention and deletion

We keep your information while your account is active. When a practice owner deletes a practice, its data is permanently deleted from the live database; backups roll off within [7–30] days. To delete your account entirely, email [EMAIL].

Changes

We'll post updates here and notify you of material changes by email.

Contact

[EMAIL] · [MAILING ADDRESS]