Privacy Policy

Account information — name, email, professional role, and organization details you provide when you register.

Billing information — handled by our payment processor. We receive limited details such as the last four digits of your card, card brand, and billing status; we do not store full card numbers.

Customer Data — the case, client, and clinical information you and your team enter to prepare evaluations and reports.

Usage & device data — log data, activity within the Service, and technical information used to operate and secure the platform.

When you use the Service to process protected health information (PHI) on behalf of your practice, we act as your service provider (business associate). We handle PHI in accordance with our Business Associate Agreement (BAA) and use it only to provide the Service and as permitted by that agreement and applicable law — not for our own independent purposes.

We use information to provide, maintain, secure, and improve the Service; to process payments and manage subscriptions; to provide support and send service-related communications; to detect and prevent fraud and abuse; and to comply with legal obligations. We do not sell your personal information or Customer Data.

Foresica uses a third-party large-language-model provider to generate evidence-anchored drafts and quality checks from the content you submit. Content sent for drafting is processed to return results to you. We do not use your Customer Data to train third-party public models, and every draft remains subject to your clinician review before use.

We share information only as needed to run the Service, with providers who are bound to protect it, including:

(a) a payment processor to handle billing; (b) an email provider to send transactional messages; (c) an SMS/voice provider for notifications and appointment reminders; and (d) an AI provider for Foresica drafting. We may also disclose information to comply with law or to protect the rights and safety of users and the public.

We retain information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When you close your account, we delete or de-identify data in accordance with our BAA and applicable law, subject to reasonable backup and retention periods.

We use technical and organizational safeguards designed to protect information, including encrypted transport, role-based access controls, hashed passwords, secure session handling, and audit logging. No system is perfectly secure, but we work to protect your data commensurate with its sensitivity.

You may access and update your account information in the Service, and you may cancel your subscription at any time. Depending on your location, you may have rights to access, correct, delete, or restrict the processing of personal information. For requests involving client PHI, we act on your practice’s instructions as its service provider. Contact us to exercise any right.

We use cookies and similar technologies that are strictly necessary to authenticate you and keep the Service secure and functional. We do not use the Service to run third-party advertising trackers.

The Service is intended for professional use and is not directed to children. Note that Customer Data may include information about individuals of any age when relevant to an evaluation; that data is handled as PHI/Customer Data under this Policy and the BAA.

We may process and store information in countries other than where you are located. Where required, we use appropriate safeguards for such transfers.

We may update this Policy from time to time. If we make material changes, we will provide reasonable notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

Questions about privacy or this Policy? Email us at info@rebhumanservices.org.