Legal

Privacy policy

Two kinds of information reach us: what you share when you visit or contact us, and the client records our customers keep in Confirmity. Different rules apply to each.

Last updated October 17, 2026Questions: hello@confirmity.app

Website visitors

When you visit confirmity.app or email us, we may receive:

  • What you write to us, such as your name, work email, center name and the payers you bill.
  • Basic technical data any website receives, such as your IP address, browser type and the pages you load, which our hosting provider records to keep the site running and secure.

We use this to answer you, schedule walkthroughs, and keep the site working. We do not sell it or share it for advertising. Our booking forms open your own email app; nothing is sent until you press send.

Client records and PHI

Centers use Confirmity to manage work that involves protected health information (PHI), including records covered by 42 CFR Part 2. For that data:

  • The center is the covered entity or Part 2 program. We are its business associate, and we act under the business associate agreement we sign with it.
  • We use PHI only to provide the service to that center, as the BAA allows. We do not sell it, use it for advertising, or use it for our own purposes.
  • Part 2 records are only shared when the client's consent covers it.
  • PHI is stored with vendors that have signed BAAs with us (Vercel and Neon). Vendors without a signed BAA never receive PHI. See subprocessors.

If you are a client of a center that uses Confirmity, please contact your center about your records. They control them, and we will help them respond.

Demos and sample data

Every demo, walkthrough and pre-contract pilot uses made-up sample data. We do not ask for patient data before a BAA is signed.

Who we share with

We share information only with the service providers that run Confirmity (listed on our subprocessors page), when the law requires it, or with your permission.

How long we keep it

We keep website messages as long as needed to answer and follow up. Customer data, including PHI, is kept, returned or destroyed as the customer's agreement and BAA say.

Your choices

You can ask us what we hold about you from your contact with us, ask us to correct it, or ask us to delete it. Write to us and we will respond.

Changes

If we change this policy we will update the date at the top. Material changes for customers are also covered by their agreements.

Contact

Email hello@confirmity.app. A person reads every message.