Privacy Policy

Last updated: May 18, 2026

What we collect

We collect the information you provide in the intake (practice name, owner name, owner email, aggregate clinic numbers) and standard request data (IP, user agent, page views) for security and analytics.

We do not collect Protected Health Information (PHI). The intake asks for aggregates, percentages, and counts — not patient records.

How we use it

  • To produce and deliver your report.
  • To email you about your report, refund window, and related products you opted into.
  • To improve our methodology in aggregate (no clinic is identified in internal analysis).
  • To meet legal, accounting, and tax obligations.

What we don't do

  • We don't sell your data.
  • We don't share your intake with vendors, EHRs, or third parties.
  • We don't use your clinic's specific numbers in marketing or case studies without your written permission.

Sub-processors

We rely on a small number of vetted sub-processors: cloud hosting, email delivery, payment processing (Stripe), and error monitoring. A current list is available on request.

Retention

Intake responses and delivered reports are retained for 24 months unless you request deletion sooner. Billing records are retained for 7 years per US tax requirements.

Your rights

Email privacy@clearmedian.com to request a copy of your data, correct it, or delete it. We respond within 14 days.

Contact

Questions about this policy: privacy@clearmedian.com.