Privacy Policy

1. Who we are

Sky Forward Design LLC is the controller of the personal information described in this policy. If you have any questions or requests, contact us at privacy@skyforwarddesign.com.

2. Information we collect

Information you provide

• Sample report requests. When you generate a sample report, we collect your clinic name, ZIP code, service radius, the provider specialties you select, and your work email address.
• Checkout and subscription. When you subscribe, we collect your email address and practice ZIP code. Payment is processed by Stripe; your card details are handled directly by Stripe, and we do not collect or store your full card number.
• Account and service area. When you use the dashboard, we maintain your email address (used for passwordless sign-in), your service area (ZIP, radius, and specialties), and your report cadence.
• Communications. If you email us or contact support, we keep the contents of those messages and our reply.

Information collected automatically

• Essential cookies and similar storage. We use cookies and browser storage that are necessary to run the Services, such as keeping you signed in (Firebase Authentication) and supporting secure checkout (Stripe). See the Cookies section below.
• Server and security logs. Our servers record technical information such as your IP address and basic request details. We use this to operate the Services and to protect them from abuse (for example, rate limiting on our public forms).
• Analytics and advertising. We use Google Analytics 4 and Google Ads, which set cookies and collect usage data such as pages viewed, links clicked, approximate location derived from your IP address, and device and browser information, to measure traffic and support our advertising. We enable Google Analytics data redaction to remove email addresses and sensitive URL parameters before this data is collected. See the Cookies section below.

3. How we use information

We use the information above to:

• provide the Services, including generating your sample report and your weekly referral-source report;
• send transactional and service messages, such as your weekly report, sign-in links, and billing notices;
• process payments and manage your subscription (through Stripe);
• secure the Services, prevent abuse, and debug problems;
• respond to your inquiries and provide support; and
• comply with our legal obligations and enforce our terms.

4. How we share information

We do not sell your personal information for money. We use Google Analytics and Google Ads, which may be considered "sharing" of personal information for cross-context behavioral advertising under California law (see Your choices and rights below for how to opt out). We otherwise share information only as follows:

• Service providers (subprocessors). We use a small set of vendors that process information on our behalf, under contracts that limit their use of it: Stripe (payment processing and subscription billing), Twilio SendGrid (sending email, including your reports, sign-in links, and notifications), and Google Cloud Platform / Firebase (hosting, authentication, and database storage).
• Analytics and advertising partners. We share online identifiers and usage data with Google for Google Analytics (traffic measurement) and Google Ads (advertising, including remarketing). Under California law this may be considered "sharing" for cross-context behavioral advertising.
• Legal and safety. We may disclose information if required by law or to protect the rights, safety, or property of Sky Forward Design, our users, or the public.
• Business transfers. If we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction; we will notify you of any change in control or use of your personal information.

5. About the report content (CMS NPPES data)

The provider listings in Sky Leads reports (such as provider names, practice addresses, and phone numbers) are derived from public records published by CMS in the National Plan and Provider Enumeration System (NPPES). That public information describes third-party healthcare providers and is separate from the personal information you provide to us. Sky Leads and Sky Forward Design are not affiliated with, or endorsed by, CMS.

6. Data retention

We keep your information for as long as your account is active and as needed to provide the Services. We retain sample-report lead information so we can follow up about your interest and improve the Services, and account and billing records for as long as required for legal, tax, and accounting purposes. You can ask us to delete your information as described below, and we will do so unless we are required to keep it.

7. Cookies and similar technologies

We use cookies and similar browser storage in three categories:

• Essential cookies needed to run the Services: authentication state so you stay signed in (Firebase Authentication), and checkout and security functions (Stripe).
• Analytics cookies (Google Analytics 4) to understand how visitors find and use the site.
• Advertising cookies (Google Ads) to measure our campaigns and show relevant ads, including remarketing.

We enable Google Analytics data redaction, which removes email addresses and sensitive URL parameters before data is collected. You can control cookies through your browser settings, opt out of Google Analytics with Google's opt-out browser add-on at tools.google.com/dlpage/gaoptout, and manage ad personalization in your Google Account at myadcenter.google.com. Blocking essential cookies may break parts of the Services.

8. Your choices and rights

• Access and update. You can view and update your service area and account details from the dashboard.
• Email. Service messages (such as your weekly report) are part of the subscription; you can change your cadence or cancel your subscription to stop them.
• Deletion. You can ask us to delete your personal information by emailing privacy@skyforwarddesign.com.

California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of recipients;
• Delete personal information we have collected from you, subject to exceptions;
• Correct inaccurate personal information; and
• Opt out of the "sale" or "sharing" of personal information. We do not sell personal information for money, but our use of Google Analytics and Google Ads may be considered "sharing" for cross-context behavioral advertising, which you can opt out of (see below).

To opt out of this "sharing" for cross-context behavioral advertising, you can opt out of Google Analytics with Google's opt-out browser add-on (tools.google.com/dlpage/gaoptout), manage ad personalization at myadcenter.google.com, use your browser's cookie controls, or email us at privacy@skyforwarddesign.com.

We will not discriminate against you for exercising these rights. In the past 12 months we have collected the categories of information described above (identifiers such as name and email, geographic information such as ZIP code, commercial information such as subscription records, and internet or network activity such as IP address and log data) and disclosed them to the service providers and the analytics and advertising partners listed above for the business and advertising purposes described in this policy.

To exercise any of these rights, email privacy@skyforwarddesign.com. We will verify your request using the email address associated with your information and respond as required by law. You may use an authorized agent to submit a request on your behalf.

9. Security

We protect your information using measures such as encryption in transit and access controls on our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Children's privacy

The Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Effective date" above and, for material changes, provide a more prominent notice.

12. Contact us

Sky Forward Design LLC

Email: privacy@skyforwarddesign.com

Mailing address: 1218 Methodist Rd, Westbrook, ME 04092

This policy is governed by the laws of the State of Maine, without regard to its conflict-of-laws rules.