NPI Scout Privacy Policy

Customer and visitor information

Depending on how the service is used, we may collect:

• Work email, and name and company when provided
• Authentication identity, using email-and-password sign-in only, including email verification and password-reset activity. We do not use third-party or social sign-in.
• Subscription status and payment transaction metadata returned by our payment processor, such as plan, billing period, customer and subscription identifiers, and payment status
• Saved Leads
• Alert criteria, alert settings, and alert delivery history
• Searches, selected filters, map views, exports, and other product usage
• For Team Access customers only: organization membership, seat assignments and invitation records, and whether a user is a billing administrator or a named product user
• Legal acceptance records, including the terms and privacy versions accepted and the time of acceptance
• Lifecycle and product-activity events, such as signup, activation, alert creation, and delivery outcomes, together with safe analytics metadata
• Support and sales communications
• Device, security, and technical log information actually collected when the site and portal are used, including IP address, browser and device type, pages requested, timestamps, and error and security events

We do not receive or store full payment card numbers. Card details are entered directly with our payment processor.

Provider and practice business information in the product

The product contains professional and business information about healthcare providers and practice organizations, which may include:

• NPI
• Professional name or organization name and credentials
• Healthcare taxonomy, specialty group, and detailed specialty
• Practice address and location details
• Business phone numbers
• Authorized-official or primary business contact information where available
• Provider registration, enrollment, and change activity, including the date and nature of the change
• Professional activity included in the product, such as procedures performed, prescribing and ordering activity, training and experience, hospital or organizational affiliations, and industry relationships

This information is compiled from public, licensed, or otherwise permitted sources and organized with our own processing methods. It is professional and business information. NPI Scout does not intentionally collect patient records, protected health information, or clinical records about individual patients, and customers are prohibited from submitting them.

How we use information

• Operating the public website and the customer portal
• Authenticating users and securing accounts
• Providing search, maps, Saved Leads, exports, and alerts
• Delivering Free Explorer market summaries and complete Team Access market alerts
• Creating and administering Team Access organizations, seats, and named users, which today is done with assistance from NPI Scout
• Subscription billing, renewals, receipts, and account administration
• Security, abuse detection, and fraud prevention
• Customer support and service communications
• Product improvement, including understanding which features are used
• Meeting legal, tax, and regulatory obligations

Service providers and disclosures

We share information with the service providers that make the product work, and only so they can perform those services for us:

• Stripe, our payment processor, for subscription checkout, recurring payments, receipts, and the billing portal
• Our managed database, authentication, and hosting providers, which store account data, product data, and application logs
• Our transactional email delivery service, used for account, alert, digest, and support email

We may also disclose information when required by law, to protect our rights or the safety of others, or in connection with a corporate transaction such as a financing, merger, or sale of assets.

We do not currently run third-party website analytics or advertising trackers on this site. If that changes, this policy will be updated first.

Retention

Account, subscription, Saved Leads, alert, and support records are retained while the account is active and afterward for the period needed to meet legal, tax, accounting, security, and dispute-resolution obligations. Provider and practice business information is retained as part of the product data set, including historical activity records, so that customers can review past market activity. Technical and security logs are retained on a shorter, rolling basis. Organization, invitation, seat, and legal-acceptance records are retained for as long as the organization exists and afterward as needed for billing, audit, and legal purposes. When access changes, for example when a subscription ends or a seat is removed, saved configurations are preserved but the information shown in the product is reduced to what the account's current access allows.

Security

Access to the portal requires authentication, customer data is separated by account, and data is encrypted in transit. Administrative access to production data is limited to people who need it to operate the service. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Account and privacy requests

Customers can review and update profile details, Saved Leads, and alerts in the portal, and can manage or cancel a subscription from Account, then Manage subscription. To request access to, correction of, or deletion of account information, email support@npiscout.com. We will verify the request against the account before acting on it. Marketing email includes an unsubscribe link; service and billing email related to an active account is not optional.

Provider correction or suppression requests

A provider or practice that wants business information about them corrected or suppressed in the product can email support@npiscout.com with the NPI and the specific field at issue. We review each request, correct information we can verify, and can suppress a record from customer-facing results. Information that originates in a public source may reappear in a later refresh unless it is corrected at that source as well, so we also keep an internal suppression record.

California and other privacy rights

Depending on where a person lives, they may have the right to request access to, correction of, or deletion of personal information, to request details about how it is used and disclosed, and to be free from discrimination for exercising those rights. Requests can be sent to support@npiscout.com and will be handled in line with applicable law.

Privacy rights and obligations vary by jurisdiction. NPI Scout handles applicable privacy requests in accordance with applicable law. Questions or privacy requests may be submitted using the contact information provided below.

Children

The service is for business use by adults. It is not directed to children, and we do not knowingly collect information from anyone under 18. If we learn that we have, we will delete it.

Changes to this policy

We may update this policy as the product develops. When we do, the effective date above changes. Material changes will be communicated to account holders.

Contact

NPI Scout LLC, San Diego, California. Privacy questions and requests: support@npiscout.com.