Privacy policy

Last updated: July 20, 2026

What we collect

We collect account information (name, email), practice settings, and athlete/assessment data you enter to provide the service. Payment data is processed by Stripe; we do not store full card numbers.

Health information boundary

This is a standard SaaS product and is not a HIPAA-covered service at this time. Do not upload protected health information if your organization requires a BAA.

Subprocessors and analytics

Hosting and limited marketing/auth analytics are provided by Vercel; database and authentication by Supabase; billing by Stripe. Analytics is not loaded on practitioner record, assessment, or report pages.

Export, retention, and deletion

You may export your workspace data or request account deletion from Account settings. We retain account and workspace data while the account is active and as reasonably required for security, billing, dispute, and legal obligations. Account deletion removes the workspace through the in-product deletion control, subject to limited records a payment processor or law requires us to retain.

Contact

Do not send person names, health information, assessment content, passwords, or payment details in support email. For access, correction, export, deletion, or privacy questions, contact support@vauxcorps.com.