Do not store protected health information unless your setup meets HIPAA requirements. Using Empower Cove tools does not by itself establish HIPAA compliance. Verify the platforms and services you use, implement required safeguards, and obtain any required signed Business Associate Agreements before handling PHI. Do not send PHI to our customer support.
1. Information We Collect
Empower Cove collects the following types of information:
- Account Information: Name, email, phone number, address, license information, and business details
- Billing Information: Payment method, billing address, and transaction history
- Usage Data: Login times, features accessed, and interaction patterns (non-PHI analytics)
- Device Information: IP address, browser type, device type, and operating system
Information you enter into a third-party practice-management platform is subject to that platform's terms and privacy practices. This policy does not represent that Empower Cove hosts or securely processes client records or PHI.
2. How We Use Your Information
- Provide, maintain, and improve the Service
- Process payments and manage billing
- Send service updates and security alerts
- Respond to customer support requests
- Comply with applicable legal and regulatory obligations
- Detect and prevent fraud or abuse
- Conduct analytics and research (only on non-PHI data)
3. Data Retention
We retain your account and billing information for the duration of your subscription and for a reasonable period afterward for tax, legal, and audit purposes. You may request deletion of your data by contacting support. For records stored in a third-party platform, verify that platform's retention, export, and deletion settings directly.
4. Data Sharing & Third Parties
We do NOT sell your data. We may share information with:
- Service Providers: Payment processors, cloud hosting providers, and email service providers used to operate our business
- Legal Authorities: When required by law, court order, or government request
- Authorized Users: With your permission to team members or supervisors within your practice
This policy does not establish a Business Associate Agreement or confirm that any provider is authorized to handle PHI. Obtain and verify any required signed BAAs before using a provider with PHI.
5. California Privacy Rights (CCPA)
If you are a California resident, you have the right to: (a) know what personal information we collect, (b) delete personal information, and (c) opt-out of data sales (we do not sell data). To exercise these rights, contact us at privacy@empowercove.com.
6. EU Data Protection (GDPR)
If you are located in the European Union, you may have rights to access, correct, delete, and port your personal data under applicable law. Contact us to discuss a privacy request. Verify the privacy obligations and protections applicable to any third-party platform you use.