Privacy Policy

Overview

FQHC Ready ("we," "us," or "our") operates a compliance tracking platform for Federally Qualified Health Centers. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

FQHC Ready is not intended to store protected health information (PHI). Users must not upload PHI to this platform. OSV and UDS compliance work can be completed using policies, procedures, and aggregate data — patient records are never required.

Information We Collect

• Account information. When you sign in via Google or Microsoft, we receive your name and email address from the identity provider.
• Organization data. Organization name, member roles, and compliance tracking data (OSV readiness scores, UDS table assignments, chapter notes) that you or your team enter into the platform.
• Usage data. Logs of actions taken in the platform (page views, feature usage) used to operate and improve the service.

How We Use Your Information

• To provide and operate the FQHC Ready platform
• To authenticate your identity and manage access within your organization
• To send transactional emails (e.g., team invitations)
• To improve the platform through aggregated, de-identified usage analytics
• To respond to support requests

We do not sell your data. We do not use your data for advertising.

Third-Party Service Providers

We use the following third-party services to operate the platform:

• Google Firebase (Google LLC).Cloud database (Firestore), authentication, and hosting. Your data is stored in Firebase and subject to Google's data processing terms.
• Resend. Transactional email delivery (e.g., team invitation emails). Resend receives only the recipient email address and the email content we generate.
• Google / Microsoft identity providers. Used for sign-in only. We receive your name and email; we do not receive your password.

Data Retention

We retain your account and organization data for as long as your organization account remains active. If you close your account or request deletion, we will delete your data within 60 days, except where retention is required by law.

Your Rights

You may request to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your organization's compliance data

To exercise these rights, email support@fqhcready.com.

Security

We implement industry-standard technical and organizational security measures, including Firebase security rules, encrypted connections (TLS), and role-based access controls within each organization. No system is perfectly secure; notify us immediately if you suspect unauthorized access.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify organization admins by email or via an in-app notice at least 14 days before the changes take effect.

Contact

Questions about this Privacy Policy? Contact us at support@fqhcready.com.