Privacy Policy
Contents
1. What we collect
We collect the minimum information needed to operate the Service.
| Category | Examples | How collected |
|---|---|---|
| Account information | Name, email address, company name | You provide at signup |
| Billing information | Payment method, billing address | Stripe collects on our behalf — we do not store raw card numbers |
| API usage data | Request timestamps, endpoint called, response codes, IP address, quota consumed | Automatically logged when you call the API |
| Website analytics | Pages visited, referrer, browser type, approximate location | Google Tag Manager / Google Analytics on the marketing site |
| Communications | Emails you send us, support requests | You provide directly |
We do not collect Protected Health Information (PHI) and the Service is not designed to receive it. Do not transmit PHI through the API.
2. How we use it
- Providing the Service: Authenticating requests, enforcing quotas, returning NPI data.
- Billing and account management: Processing payments, sending invoices and renewal notices, managing plan changes and cancellations.
- Security and abuse prevention: Detecting unauthorized use, rate limit violations, and fraudulent activity.
- Product improvement: Understanding which endpoints are used, diagnosing errors, and prioritizing features. Usage data is analyzed in aggregate.
- Communications: Sending transactional emails (account confirmation, billing receipts, service notices). We do not send marketing emails without your consent.
- Legal compliance: Retaining records as required by law and responding to valid legal requests.
We do not sell, rent, or share your personal information with third parties for their own marketing purposes.
3. Third-party services
We use the following third-party processors to operate the Service. Each is bound by their own privacy policies.
| Processor | Purpose | Privacy policy |
|---|---|---|
| Stripe | Payment processing and subscription billing | stripe.com/privacy |
| Google Tag Manager / Analytics | Website analytics (marketing pages only) | policies.google.com/privacy |
| Amazon Web Services | API hosting and infrastructure | aws.amazon.com/privacy |
4. Data retention
- Account information is retained for the duration of your account plus up to 3 years after closure for legal and accounting purposes.
- API usage logs (request metadata) are retained for 90 days for debugging and quota enforcement, then deleted or anonymized.
- Billing records are retained for at least 7 years as required by U.S. tax law.
- Communications are retained for as long as reasonably necessary to resolve the matter.
5. Security
We use industry-standard measures to protect your data, including TLS encryption in transit, restricted access controls, and regular security reviews. No system is completely secure. If you believe your account has been compromised, contact us immediately at contact@vbcriskanalytics.com.
6. Children
The Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us and we will delete it promptly.
7. Your rights
Depending on your location, you may have rights to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Request deletion of your account and associated data (subject to legal retention requirements).
- Object to or restrict certain processing.
- Receive your data in a portable format.
To exercise any of these rights, email contact@vbcriskanalytics.com. We will respond within 30 days. We may need to verify your identity before fulfilling a request.
8. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised version with an updated "Last updated" date. For material changes, we will notify account holders by email at least 14 days before the change takes effect. Continued use of the Service after that date constitutes acceptance of the updated policy.
9. Contact
Questions about this Privacy Policy or your data?
VBC Risk Analytics LLC
contact@vbcriskanalytics.com
Troy, Michigan, United States
Also see: Terms of Use