Privacy Policy | Healthboard

1. Information We Collect

We collect information you provide directly — such as your name, email address, and password when you create an account. If you are a provider claiming a profile, we may collect professional credentials and contact details. We also collect information automatically as you use Healthboard, including pages viewed, search queries, browser type, IP address, and referring URLs.

Appointment requests. When you use the “Request an appointment” form on a provider's profile, we collect the name, email address, optional phone number and message you enter and pass them to that practice, with your email address as the reply-to so the practice can answer you directly. We keep the request so the practice can find it in its Healthboard inbox, for at most 12 months. A hashed form of your network address is kept for 7 days to limit misuse of the form, then removed. Please do not include medical details in a request; the practice will ask for what it needs.

2. How We Use Your Information

To operate and improve the Healthboard directory
To authenticate your account and process payments via Stripe
To send transactional emails (account confirmation, claim approvals, subscription receipts)
To respond to your inquiries and support requests
To deliver appointment requests to the practice you chose
To detect and prevent fraud and abuse

We do not sell your personal information to third parties.

3. Cookies and Tracking

Healthboard uses cookies to maintain session state and improve performance. We do not use third-party advertising cookies. You may disable cookies in your browser settings, though some features may not function properly.

We also count how often each provider profile is viewed and how often its contact links are used. These are daily totals per profile with no visitor identifiers, and providers who have claimed their profile can see them in their portal.

4. Third-Party Services

We use the following third-party services, each with their own privacy policies:

Supabase — database and authentication
Stripe — payment processing (we never store payment card data)
Resend — transactional email delivery
Mapbox — maps and geocoding

5. Data Retention

We retain your account data for as long as your account is active. You may request deletion of your account and associated data by contacting us at hello@healthboard.com. Reviews and provider claim records may be retained for legal and compliance purposes.

6. Children's Privacy

Healthboard is not directed at children under 13. We do not knowingly collect personal information from children.

7. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes by email. Continued use of Healthboard after changes constitutes acceptance of the updated policy.

8. Contact

Questions about this policy? Email us at hello@healthboard.com.