Privacy Policy

1. Information We Collect

PracticeScanner ("we," "us," or "our") operates practicescanner.com and provides HIPAA compliance scanning services for healthcare practices. This Privacy Policy explains what information we collect, how we use it, and your rights with respect to that information.

We collect information in two ways: directly from you and automatically when you use our services.

Information you provide directly:

• Your name and email address when you contact us or subscribe
• Your practice name, website URL, and NPI number for scanning purposes
• Billing information processed by our payment processor (Stripe) — we never store card numbers

Information collected automatically:

• Basic usage data such as pages visited and browser type (via server logs)
• Your IP address for security and fraud prevention purposes

We do not use advertising tracking pixels, session replay tools, or behavioral analytics on this website.

2. How We Use Your Information

• To perform HIPAA compliance scans on the website URL you provide
• To deliver your compliance reports by email
• To process your subscription payments via Stripe
• To respond to your questions and support requests
• To send you compliance updates relevant to your subscription (you may unsubscribe at any time)

3. Scanning of Your Website

Our service scans your practice's public-facing website for HIPAA compliance violations. This scanning is performed on publicly accessible content only — we do not access any internal systems, patient records, or protected health information. The findings from your scan are shared only with you and are never disclosed to third parties, regulators, or legal firms.

4. Information We Do Not Collect or Share

• We do not collect, store, or process any patient data or protected health information (PHI)
• We do not sell your information to any third party
• We do not share your scan results with regulators, law enforcement, or legal firms
• We do not share your contact information with advertisers

5. Third-Party Services

We use the following third-party services to operate our business:

• Stripe — payment processing. Stripe's privacy policy governs their handling of your billing information.
• Google Workspace — email and document management, subject to a signed BAA.
• Internet Archive (Wayback Machine) — publicly available archive service used to document violation history. No personal data is transmitted to the Internet Archive.

6. Data Retention

We retain your account information and scan history for as long as your subscription is active and for a reasonable period afterward for billing and support purposes. You may request deletion of your data at any time by contacting us at the address below.

7. Security

We use HTTPS encryption for all data transmitted to and from this website. Access to customer data is restricted to authorized personnel only. We do not store payment card information — all billing is handled by Stripe.

8. Your Rights

You have the right to access, correct, or delete the personal information we hold about you. To exercise any of these rights, contact us at support@practicescanner.com. We will respond within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of our services after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy or how we handle your information, please contact us: