Privacy Policy

1. Scope

This Privacy Policy explains what information EasyPOC collects when you use easypocapp.com and related services (the "Service"), how we use it, and the choices you have.

2. Information we collect

• Account information: your name and email address when you register, and authentication data.
• Content you submit: citation text, uploaded documents such as Statements of Deficiency, facility names, topics, and other inputs you provide to generate output.
• Usage information: features used, generation counts, and similar activity, which we use for limits, billing, and product improvement.
• Payment information: processed by our payment processor, Stripe. We do not store full card numbers; Stripe handles payment data under its own terms.
• Technical and cookie data: IP address, device and browser information, and cookies or similar technologies used for authentication, security, and basic analytics.

3. Not intended for protected health information

The Service is not designed to receive protected health information (PHI) or other individually identifiable patient data, and you should not submit it. Statements of Deficiency and similar documents should be submitted in their standard, de-identified form.

4. How we use information

We use information to provide and secure the Service, generate the output you request, enforce plan limits, process payments, communicate with you about your account and the Service, send transactional and, where permitted, marketing email, and improve the Service.

5. How information is shared

We do not sell your personal information. We may also disclose information where required to comply with law or to protect our rights and users. We share information with the service providers (subprocessors) listed below, who process it on our behalf under agreements that limit their use to providing the Service:

6. AI processing

Output is generated using third-party AI providers. Content you submit for generation, and search queries used to retrieve reference material, are sent to those providers to produce your results. We work with providers whose terms restrict using submitted content to train their general models, but you should not submit information you are not comfortable processing this way, and you should not submit PHI.

7. Data retention

We retain account information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account and associated content as described below.

8. Security

We use reasonable technical and organizational measures to protect information, including access controls, row-level security policies that isolate each account's data, encryption in transit (TLS/SSL), and encryption at rest. Our hosting and database providers maintain SOC 2-compliant infrastructure. No system is perfectly secure, and we cannot guarantee absolute security.

9. Your choices and rights

You may access or update your account information, request deletion of your account and content, and opt out of marketing email using the unsubscribe link or by contacting us. Depending on your location, you may have additional rights under applicable privacy laws; contact us to exercise them.

10. Cookies

We use cookies for authentication, security, and basic analytics. You can control cookies through your browser, though some features may not work without them.

11. Children

The Service is intended for professional use and is not directed to children under 18, and we do not knowingly collect information from them.

12. Changes

We may update this Policy. Material changes will be posted here with a new effective date.

13. Contact

Questions or requests: support@easypocapp.com, R3 Management LLC dba EasyPOC, 874 Willowbend Lane, Baldwin, NY 11510.