Privacy and data use

RetentionTek stores account information, business setup, imported visit records, internal review tasks and assessment submissions to provide its current workspace and assessment service.

Use limited business data

Do not submit medical records, treatment notes, diagnoses or sensitive clinical information. Use only data you have authority to process. Imported data is not independently verified. This product makes no HIPAA or SOC 2 certification claim.

Accounts and access

Workspace access is restricted by membership. Passwords are handled by the authentication service; sessions use HTTP-only cookies. Email ownership verification is not currently enabled. Account and operational security is not a certification.

AI and communication

The current evidence assistant runs deterministic rules; it does not send imported records to an external AI model. No automated SMS, email marketing, payment or provider delivery is enabled. Assessment contact consent is distinct from permission to contact your customers.

Deletion and retention

Use Imports → Delete to remove a stored dataset and related internal tasks from the application database. Backup copies may remain until the operator removes or expires them. Use the Contact page for privacy and account-deletion requests. Requests require manual review and identity confirmation. A verified backup retention schedule remains a launch limitation.

Assessment submissions

The assessment form saves the submitted business contact details and calculated result for operator review. Its confirmation means the submission was saved, not that an email was delivered or a follow-up occurred.