Privacy Policy

Information the software processes

The software processes the provider lead data the customer supplies — for example NPI, provider name, practice address, business phone, and specialty. This is business and professional information about healthcare providers. The software does not process patient health information (PHI).

Where processing happens

In the standard deployment, processing and any caching occur on the customer's own machine. We do not operate servers that receive or store this data, we do not sell it, and we do not use it for any purpose other than providing the software's functionality.

Third-party services (sub-processors)

When the customer enables them, the software sends limited data to Google (business and address lookup) and Twilio or NumVerify (phone validation). Public government registries — NPPES, CMS, and the OIG exclusion list — are queried as reference data. A current sub-processor list is available on request.

Retention

Local results caching defaults to 14 days and is controlled by the customer, who can clear it at any time by deleting the local cache folder. Because data is stored on the customer's machines, the customer controls retention.

Website information

Our website collects the information you submit through our contact form — such as your name, work email, company, and message — solely so we can respond to your inquiry. We do not sell this information.

Your rights

Depending on your jurisdiction (for example, under GDPR or CCPA/CPRA), you may have rights to access, correct, or delete personal information. Because provider data is processed locally on customer machines, such requests are primarily handled by the customer as data controller. For information you submitted to us directly, contact us at info@recerna.com.

Changes

We will post updates to this policy here with a revised effective date.

Contact

Questions about this policy can be sent to info@recerna.com.