Privacy Policy
Last updated: March 2026
1. Information We Collect
We collect account information (name, email), care assessments, messages, and usage data. We do not sell personal information.
2. Document Security
Documents you upload are encrypted at rest and in transit. Only you and facilities you explicitly authorize can access document contents. NectaLink administrators can view metadata (file name, type, date) but not document contents.
3. Protected Health Information (PHI)
NectaLink is not a HIPAA-covered entity during MVP and does not knowingly accept Protected Health Information. Clinical and care-record features that would handle PHI are gated and disabled until we move that workload onto HIPAA-eligible infrastructure. Please do not upload medical records that constitute PHI under HIPAA at this time.
4. Data Retention
Your data is retained while your account is active. You may request deletion of your account and associated data at any time.
5. Cookies
We use essential cookies for authentication. We do not use tracking cookies for advertising purposes.
6. Contact
For privacy questions, contact privacy@nectalink.example.