Privacy Policy

Information we collect

We collect account information you provide (name, email, organization, billing details) and product usage information such as the questions you submit and the documents you generate.

• Account and contact details
• Subscription and billing metadata processed by our payment provider
• Questions, prompts, and generated documents
• Technical logs such as IP address, browser type, and timestamps

Protected health information

Ask a DON is designed to answer regulatory, policy, and operational questions without protected health information. We ask that you do not submit resident identifiers, medical record numbers, or other PHI. If PHI is submitted inadvertently, contact us and we will remove it.

How we use information

• To deliver answers, generate documents, and maintain your account
• To monitor service quality, reliability, and abuse
• To communicate service updates and regulatory alerts you subscribe to
• To meet legal, tax, and accounting obligations

What we do not do

• We do not sell your information.
• We do not use your facility content to train third-party foundation models.
• We do not share your content with other customers.

Service providers

We use vetted providers for hosting, payment processing, analytics, and AI inference. These providers process information only as needed to deliver the service and under contractual confidentiality obligations.

Retention and security

Information is retained for as long as your account is active and for the period required by law thereafter. We apply access controls, encryption in transit, and least-privilege practices. No system is perfectly secure, and we encourage you to use strong, unique credentials.

Your choices

• Request a copy of your account information
• Request correction or deletion of your account information
• Opt out of marketing communications at any time
• Close your account and request removal of stored content

Changes to this policy

We may update this policy as the product evolves. Material changes will be communicated to account holders before they take effect.