Privacy Policy

Account information (name and email address) through our authentication provider, Clerk; any additional email addresses you choose to link and verify; your watchlist terms, digest preference and saved settings; billing status through our payment processor, Stripe (we never receive or store your full payment card number); and, for included access, the email address and subscription status reported to us by ExamPrep or HealthData DueCare. We also keep standard server logs for security and troubleshooting.

The breach reports, regulatory documents, advisories and recalls we publish are federal agency records about organizations. We do not hold protected health information, and we do not collect information about individuals affected by a breach.

To operate your account, decide which features you are entitled to, send the alerts and digests you have asked for, process subscription payments, and communicate with you about your account. We do not sell your personal information and we do not use it for advertising.

Clerk for authentication, Stripe for billing, Vercel and Neon for hosting and database storage, and Microsoft 365 for sending email. Each processes data on our behalf under its own privacy and security practices. Entitlement messages from ExamPrep and HealthData DueCare are received over signed, private connections.

We use only essential cookies: authentication and session management, and remembering your preferences. We do not use advertising or cross-site tracking cookies, so no consent banner is shown.

Depending on where you live, including under the California Consumer Privacy Act, the Virginia Consumer Data Protection Act, or the EU/UK GDPR, you may have the right to access, correct, delete, or receive a copy of your personal information, or to object to certain processing. To exercise any of these rights, contact us using the details below.

We retain your account data for as long as your account is active, and for a reasonable period afterward to comply with legal and accounting obligations. Alert and digest send records are kept so we never send the same item twice. You can request deletion of your account and associated data at any time.

We use industry-standard safeguards, including encrypted connections and access-controlled infrastructure, to protect your information. No system is completely secure, and we cannot guarantee absolute security.

This Service is intended for working professionals and is not directed to, or knowingly used by, children under 13.

We may update this Privacy Policy from time to time. Continued use of the Service after a change takes effect constitutes acceptance of the update.

For privacy questions or requests, contact rick@mtcgroupllc.com.