Legal

Privacy Policy

Last updated: 8/21/26

This Privacy Policy explains how David Franciamone (Independent Developer) ("we," "us," "our") collects, uses, and shares information when you use the CT Consulting Agent website and application (the "Service").

1. Information We Collect

Category	Examples
Account information	Username, hashed password, session identifiers
Case & workflow data	Site/hospital names, department, staffing counts, workflow notes, problems logged, generated reports
Usage data	Feature usage, generation history, review/feedback ratings, timestamps
Billing information	Processed by our third-party payment processor; we do not store full card numbers
Technical data	IP address, browser type, device information, cookies

2. Do Not Submit Patient-Identifying Information

The Service is not a HIPAA-covered platform and we do not currently execute Business Associate Agreements (BAAs). Please do not enter any Protected Health Information (PHI) or other data that could identify an individual patient. Enter only de-identified, operational, or aggregate information. If you believe PHI was submitted in error, contact us immediately at David.Franciamone@gmail.com so we can assist with removal.

3. How We Use Information

To provide, operate, and maintain the Service, including generating requested reports and content;
To process payments and manage subscriptions;
To improve the Service, including via aggregated, de-identified usage analytics;
To communicate with you about your account, billing, or changes to our policies;
To detect, prevent, and address technical issues, fraud, or abuse.

4. Third-Party AI Providers

When you generate content, the text you submit (and relevant case context) is sent to our AI provider, currently OpenAI, to produce the output. This transmission is subject to OpenAI's own data handling and retention terms. We do not control how long that third party retains data on its own systems; refer to OpenAI's API data usage policies for details. Do not include PHI or other sensitive personal data in any content you submit for generation.

5. How We Share Information

We do not sell your personal information. We may share information with:

Service providers who help us operate the Service (e.g., hosting/database provider, payment processor, AI provider), under confidentiality obligations;
Other members of your organization, if you join or create a shared organization within the Service — case data is visible to other members per their assigned role;
Legal authorities, if required to comply with a law, subpoena, or legal process, or to protect our rights or the safety of others;
A successor entity, in the event of a merger, acquisition, or sale of assets, subject to this policy or a materially similar one.

6. Data Retention

We retain account and case data for as long as your account is active, plus a reasonable period afterward for backup, legal, and dispute-resolution purposes. You may request deletion of your account and associated data by contacting David.Franciamone@gmail.com, subject to Section 8 below.

7. Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information, including encrypted connections (HTTPS), hashed passwords, and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

You may access, correct, or delete certain account information directly within the Service.
Depending on your jurisdiction (e.g., California, EU/UK), you may have additional rights to access, delete, correct, or restrict processing of your personal data, or to object to certain uses. Contact David.Franciamone@gmail.com to exercise these rights.
Note that some information (e.g., case data shared within an organization, or records needed for legal/billing compliance) may be retained even after an account deletion request, as permitted by law.

9. Cookies

We use a session cookie to keep you logged in. We do not currently use third-party advertising or tracking cookies. If this changes, this policy will be updated accordingly.

10. Children's Privacy

The Service is intended for business/professional use by adults and is not directed to individuals under 18. We do not knowingly collect information from children.

11. International Users

The Service is hosted in United States. If you access the Service from outside that region, your information will be transferred to and processed there.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via the Service or email at least 14 days before taking effect.

13. Contact Us

Questions or requests regarding this Privacy Policy can be sent to David.Franciamone@gmail.com.