Privacy Policy

Introduction

HealthPriceWatch ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our compliance monitoring service.

Information We Collect

Account Information

When you create an account, we collect:

• Name and email address
• Hospital name and CMS Certification Number (CCN)
• Role/title at your organization
• Billing information (processed securely through our payment provider)

Compliance Data

To provide our monitoring service, we collect:

• URLs of your machine-readable pricing files
• Compliance scan results and violation data
• Historical pricing file snapshots for compliance tracking

Usage Information

We automatically collect:

• Log data (IP address, browser type, pages visited)
• Device information
• Usage patterns and analytics

How We Use Your Information

We use the information we collect to:

• Provide and maintain our compliance monitoring service
• Send compliance alerts and notifications
• Process your payments and manage your subscription
• Improve our service and develop new features
• Provide customer support
• Send administrative information and updates
• Comply with legal obligations

Data Security

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit using TLS 1.3
• Data at rest is encrypted using AES-256
• Access controls and authentication requirements
• Regular security audits and vulnerability assessments
• SOC 2 Type II compliance (in progress)

Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

Service Providers

We use trusted third-party services to help operate our platform:

• Hosting infrastructure (Vercel, Supabase)
• Payment processing (Stripe)
• Email delivery (Resend)
• Analytics (Google Analytics)

Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect the rights, property, or safety of HealthPriceWatch, our users, or others.

Data Retention

We retain your data for as long as your account is active or as needed to provide our services. Compliance scan history is retained for 7 years to support audit requirements. You may request deletion of your data by contacting us.

Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Export your data
• Opt-out of marketing communications
• Object to processing of your data

To exercise these rights, contact us at privacy@healthpricewatch.com

Cookies and Tracking

We use cookies and similar tracking technologies to improve user experience and analyze usage patterns. You can control cookies through your browser settings. Essential cookies required for site functionality cannot be disabled.

Children's Privacy

Our service is not intended for individuals under 18. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through our service. Your continued use of HealthPriceWatch after changes constitutes acceptance of the updated policy.