Privacy Policy

This Privacy Policy explains how [Company Legal Name] ("Reccura," "we," "us") collects, uses, and protects information in connection with the Reccura Service, as defined in our Terms of Service. It applies to businesses that use Reccura ("you") and, where relevant, to the customers whose data a business uploads to the Service.

Account information: name, email address, and password (managed by our authentication provider, Supabase), or your Google account identifier if you sign in with Google.

Business information: your business name and preferences you set while using the Service.

Customer/patient data: the names, contact information, and treatment or transaction details you import or enter for your own customers, used solely to detect revenue opportunities in your data. You control this data; it is uploaded by you for the purpose of using the Service.

Payment information: payment card details are collected and processed directly by our payment processor, Stripe. Reccura does not store full card numbers.

Usage information: standard technical information such as log data and device/browser information, collected automatically when you use the Service.

• To provide, operate, and maintain the Service;
• To detect and score revenue opportunities in the data you upload;
• To generate AI-assisted suggestions and answers you request;
• To process payments;
• To communicate with you about your account or the Service; and
• To comply with legal obligations and enforce our Terms of Service.

We do not sell your data or your customers' data.

We use the following third-party providers to operate the Service. Each processes a limited scope of data solely to perform its function for us:

• Supabase: database hosting, authentication, and storage for account, business, and customer data.
• Groq: processes the data and questions you submit to the AI assistant to generate its responses.
• Stripe: processes payment information for paid plans.
• Resend: sends account-related emails (sign-up confirmation, password reset, login links).
• Vercel: hosts the Service.
• Google: provides optional sign-in if you choose to authenticate with your Google account.

We retain your account and customer data for as long as your account is active, and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your business's data at any time (see Section 7).

Customer and business data is stored with row-level security policies that restrict every business to its own data. We minimize what we log and avoid logging full contact records in plaintext application logs. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You may access, update, or delete most of your business and customer data directly within the Service (Settings, Opportunities). You may also request export or deletion of your business's data by contacting us at [Contact Email]. Depending on your location, you may have additional rights under laws such as the CCPA or GDPR; contact us to exercise them.

The Service is intended for business use and is not directed at individuals under 18. We do not knowingly collect personal information from children.

We use essential cookies to maintain your login session. We do not currently use advertising or cross-site tracking cookies.

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice (such as by email or in-product notice) before they take effect.

Questions about this Privacy Policy can be sent to [Contact Email].