Privacy Policy

We collect information needed to provide and secure the Service:

• Organization information — organization name, edition or plan, configuration settings, and administrator contact details.
• Account and authentication information — name, work email address, assigned role, and authentication data used to sign in.
• Subscription and transaction information — plan, subscription status, billing period, and payment-processor references such as customer and subscription identifiers.
• Operational information entered by users — the non-PHI operational records, tasks, deadlines, and notes customers choose to enter.
• Operational and security logs — access and audit records, device and browser information, IP address, and diagnostic logs.

We use information to operate, maintain, secure, support, administer, and improve ACT Command; to authenticate users and enforce organization isolation and permissions; to process subscriptions and billing; to communicate service, security, and account notices; to detect and prevent misuse; and to meet legal obligations.

We do not sell personal information and do not use it for third-party advertising.

We use a limited set of third-party providers to deliver the Service, including cloud hosting, database and authentication infrastructure, email delivery, and payment processing. Providers may process information only as needed to provide their services to us.

Payments are processed by Stripe. Stripe collects and processes payment information directly. ACT Command does not collect or store complete payment card details.

Each customer organization's records are isolated from other organizations. Access within an organization is controlled by the roles and permissions its administrators assign. ACT personnel access customer environments only where necessary to operate, support, or secure the Service, or where required by law.

We use reasonable administrative and technical safeguards, including encrypted transport, authenticated access, role-based permissions, organization-level data isolation, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain information for as long as an account is active and as needed to provide the Service, resolve disputes, maintain security and audit records, and meet legal and accounting obligations. Following termination, customer information may be deleted after a reasonable period. Customers are responsible for their own record-retention obligations.

Account administrators can update organization and user information within the Service and can disable users who should no longer have access. Individuals may request access, correction, or deletion of their personal account information, subject to legal and contractual limits, by contacting us. Where a request concerns information an organization controls, we will refer the request to that organization.

We may update this Privacy Policy. The version identifier and effective date above will change, and material changes will be communicated through the Service or by email.

ACT Care Providers, LLC, Anchorage, Alaska, United States. Privacy questions: support@actcommand.com.