Privacy notice

1. Scope

This notice applies to information collected through the Site, including the request-access form and email sent to us. It does not apply to protected health information (PHI) that a practice processes in the Everyboard product. That information is handled under the practice’s agreement with us and a signed business associate agreement (BAA), as described on our Security & data page.

2. Do not send patient information through the Site

The Site is not designed to receive PHI or other patient information. Please do not include patient names, dates of birth, medical record numbers or other identifiable patient details in the request-access form or in email to us. If you send such information by mistake, contact us and we will delete it.

3. Information we collect

Information you give us. When you request access, we collect your name, work email, practice or institution and role, and, if you choose to give them, your state, the number of physicians in your practice, and a note. On the confirmation page you can propose a day and time for a call, which sends us that time and your time zone. If you email us, we receive your email address and message.

Information collected automatically. Like most websites, our hosting provider records standard technical data such as IP address, browser type, pages visited and the date and time of the visit. We also count visits with Vercel Web Analytics, our hosting provider’s analytics service. For each page view it records the page, the referring site, your approximate location (country, region and city), and your browser, operating system and type of device. It sets no cookies: it tells visits apart by a hash made from the request, which is discarded after 24 hours, and it does not follow you across other websites. We do not use advertising cookies or cross-site tracking.

One cookie. After you send a request, the Site sets one cookie that holds the name, work email, practice and role you entered, so the confirmation page and a call request can use them. Only the request-access pages receive it, and it expires after one day.

4. How we use information

• To respond to your request and set up a call or an account for your practice.
• To operate, secure and improve the Site.
• To send you information you asked for about Everyboard. You can opt out of non-essential email at any time.
• To comply with law and protect our rights.

5. How we share information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share it only with:

• Service providers that help us run the Site and reply to you: our hosting provider, Vercel, which also provides the Site’s analytics; our email provider, Resend, which delivers what you send through the Site; and Google Workspace, which holds our email. They may use the information only to provide services to us.
• Professional advisers, regulators or law enforcement when required by law or to protect rights and safety.
• A successor organization in a merger, acquisition or sale of assets, subject to this notice.

6. Retention

We keep request-access information for as long as needed to respond and to maintain our relationship with your practice, and no longer than 24 months after our last contact unless you become a customer. Our service providers keep their own logs for limited periods under their own policies.

7. Security

We protect information with administrative, technical and physical safeguards appropriate to its sensitivity, including encryption in transit. No method of transmission or storage is completely secure.

8. Your choices and rights

You can ask us to access, correct or delete the personal information we hold about you by writing to hello@delibera.ai. Depending on where you live, including California and other U.S. states with privacy laws, you may have additional rights, such as the right to know what we collect and to appeal a decision about your request. We will not discriminate against you for exercising these rights. We will verify your request using the email address we have on file.

9. Washington consumer health data

The Site is not designed to collect consumer health data as defined in Washington’s My Health My Data Act. If we receive such data by mistake, we will not use it and will delete it on request.

10. Children

The Site is intended for healthcare professionals and organizations. It is not directed to anyone under 18, and we do not knowingly collect their information.

11. Where information is processed

We process information in the United States.

12. Changes

We may update this notice. We will post the new version here with a new effective date, and notify you of material changes where required.

13. Contact

Delibera, Inc., Leavenworth, Washington. Email: hello@delibera.ai.