Privacy Policy

1. Who we are

Sky Forward Design LLC is the controller of the personal information described in this policy. If you have any questions or requests, contact us at privacy@skyforwarddesign.com.

2. Information we collect

Information you provide

• Sample report requests. When you generate a sample report, we collect your clinic name, ZIP code, service radius, the provider specialties you select, and your work email address.
• Checkout and subscription. When you subscribe, we collect your email address and practice ZIP code. Payment is processed by Stripe; your card details are handled directly by Stripe, and we do not collect or store your full card number.
• Account and service area. When you use the dashboard, we maintain your email address (used for passwordless sign-in), your service area (ZIP, radius, and specialties), and your report cadence.
• Communications. If you email us or contact support, we keep the contents of those messages and our reply.

Information collected automatically

• Essential cookies and similar storage. We use cookies and browser storage that are necessary to run the Services, such as keeping you signed in (Firebase Authentication) and supporting secure checkout (Stripe). See the Cookies section below.
• Server and security logs. Our servers record technical information such as your IP address and basic request details. We use this to operate the Services and to protect them from abuse (for example, rate limiting on our public forms).
• No third-party analytics. We do not currently use third-party analytics or advertising trackers on the Services. If that changes, we will update this policy before turning them on.

3. How we use information

We use the information above to:

• provide the Services, including generating your sample report and your weekly referral-source report;
• send transactional and service messages, such as your weekly report, sign-in links, and billing notices;
• process payments and manage your subscription (through Stripe);
• secure the Services, prevent abuse, and debug problems;
• respond to your inquiries and provide support; and
• comply with our legal obligations and enforce our terms.

4. How we share information

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising. We share information only as follows:

• Service providers (subprocessors). We use a small set of vendors that process information on our behalf, under contracts that limit their use of it: Stripe (payment processing and subscription billing), Twilio SendGrid (sending email, including your reports, sign-in links, and notifications), and Google Cloud Platform / Firebase (hosting, authentication, and database storage).
• Legal and safety. We may disclose information if required by law or to protect the rights, safety, or property of Sky Forward Design, our users, or the public.
• Business transfers. If we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction; we will notify you of any change in control or use of your personal information.

5. About the report content (CMS NPPES data)

The provider listings in Sky Leads reports (such as provider names, practice addresses, and phone numbers) are derived from public records published by CMS in the National Plan and Provider Enumeration System (NPPES). That public information describes third-party healthcare providers and is separate from the personal information you provide to us. Sky Leads and Sky Forward Design are not affiliated with, or endorsed by, CMS.

6. Data retention

We keep your information for as long as your account is active and as needed to provide the Services. We retain sample-report lead information so we can follow up about your interest and improve the Services, and account and billing records for as long as required for legal, tax, and accounting purposes. You can ask us to delete your information as described below, and we will do so unless we are required to keep it.

7. Cookies and similar technologies

We use only essential cookies and browser storage, the kind needed to make the Services work, including:

• authentication state so you stay signed in to the dashboard (Firebase Authentication); and
• checkout and security functions provided through Stripe.

We do not currently use analytics, advertising, or other non-essential cookies. Because these cookies are essential, they are not subject to an opt-out; you can block cookies in your browser settings, but parts of the Services may not work. If we add analytics in the future, we will update this policy first.

8. Your choices and rights

• Access and update. You can view and update your service area and account details from the dashboard.
• Email. Service messages (such as your weekly report) are part of the subscription; you can change your cadence or cancel your subscription to stop them.
• Deletion. You can ask us to delete your personal information by emailing privacy@skyforwarddesign.com.

California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of recipients;
• Delete personal information we have collected from you, subject to exceptions;
• Correct inaccurate personal information; and
• Opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information, so there is nothing to opt out of.

We will not discriminate against you for exercising these rights. In the past 12 months we have collected the categories of information described above (identifiers such as name and email, geographic information such as ZIP code, commercial information such as subscription records, and internet or network activity such as IP address and log data) and disclosed them only to the service providers listed above for the business purposes described in this policy.

To exercise any of these rights, email privacy@skyforwarddesign.com. We will verify your request using the email address associated with your information and respond as required by law. You may use an authorized agent to submit a request on your behalf.

9. Security

We protect your information using measures such as encryption in transit and access controls on our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Children's privacy

The Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Effective date" above and, for material changes, provide a more prominent notice.

12. Contact us

Sky Forward Design LLC

Email: privacy@skyforwarddesign.com

Mailing address: 1218 Methodist Rd, Westbrook, ME 04092

This policy is governed by the laws of the State of Maine, without regard to its conflict-of-laws rules.