Privacy Policy

1. Scope of This Privacy Policy

This Privacy Policy explains how GetPaneled collects, uses, discloses, stores, and otherwise processes information when you visit our website, submit a form, purchase services, communicate with us, or otherwise interact with GetPaneled.

This policy applies to information collected through our website, intake workflows, email, payment flow, and related communications. It does not apply to third-party websites, platforms, or services that we do not control, even if we link to them or use them in connection with our services.

2. What This Policy Does Not Cover

This Privacy Policy covers general website, marketing, sales, intake, and customer-service information. It does not automatically govern every category of information that could be handled in a healthcare or credentialing context.

Unless we expressly request otherwise through an appropriate workflow, the site and routine intake process are not intended for patient records, treatment notes, or other protected health information relating to your clients. If a separate notice, business associate arrangement, or service-specific instruction applies to a particular data flow, that more specific document will control for that information.

3. Information We Collect

We collect information directly from you, automatically through your use of the site, and from third parties that support our operations.

• Contact information, such as your name, email address, phone number, mailing address, and practice contact details.
• Provider and practice information, such as NPI, license state, license type, CAQH information, payer selections, practice details, tax-related details, and other credentialing-related materials you provide.
• Sensitive professional or business information you choose to submit, such as credentialing documents, W-9 information, malpractice coverage details, ownership details, or similar records relevant to enrollment workflows.
• Communication content, such as messages you submit through forms, email content, replies, support requests, and records of communications with our team.
• Transaction information, such as package selection, amounts paid, payment status, billing-related metadata, and checkout session details. Full payment card data is processed by third-party payment processors and is not stored by us on this site.
• Technical and usage information, such as IP address, browser type, device information, referring pages, pages viewed, timestamps, and similar analytics or log information collected when you use the site.
• Preference information, such as communication preferences, marketing preferences, and the way you interact with our pages or messages.

4. How We Collect Information

We collect information in several ways depending on how you interact with us.

• Directly from you when you fill out forms, request information, purchase services, email us, or otherwise communicate with us.
• Automatically through cookies, analytics tools, server logs, pixels, and similar technologies used to operate and improve the site.
• From service providers and business partners, such as payment processors, email delivery providers, analytics vendors, and other operational tools.
• From credentialing-related platforms or third parties when you authorize or request us to use information on your behalf in the course of providing services.

5. How We Use Information

We use collected information as reasonably necessary to operate the site, provide services, communicate with you, improve our business, and comply with legal obligations.

• Provide, manage, and deliver our credentialing-related services.
• Create, review, organize, and process intake and payer-related workflow information.
• Process purchases, confirm payments, detect payment issues, and maintain transaction records.
• Respond to inquiries, send updates, and communicate about your account, order, or requested services.
• Monitor site performance, understand usage patterns, improve the user experience, and troubleshoot issues.
• Prevent fraud, abuse, unauthorized access, and other harmful or unlawful activity.
• Comply with legal, regulatory, tax, accounting, risk-management, and contractual requirements.
• Establish, exercise, or defend legal claims and enforce our terms and policies.

6. Cookies, Analytics, and Similar Technologies

We and our service providers may use cookies, pixels, local storage, analytics tags, and similar technologies to remember preferences, measure performance, understand user behavior, and support core site functionality.

We may use analytics and measurement tools, including Vercel Analytics and similar website performance tools, to understand how visitors use the site, measure traffic and engagement, and improve the site over time.

These tools may collect device, usage, and browsing information such as page visits, referring pages, browser attributes, timestamps, and general interaction data. You can usually adjust cookie settings through your browser, although disabling some technologies may affect site functionality.

7. Payment Processing and Communications

Payments are processed by third-party providers, including Stripe. When you complete checkout, payment information is collected and processed by those providers under their own privacy notices and terms.

We may receive limited transaction details from payment providers, such as payment status, customer identifiers, billing metadata, and checkout session details, so that we can confirm payment, fulfill services, maintain records, and address fraud or support issues.

If you contact us, request information, or purchase services, we may send you service-related emails, follow-up messages, intake requests, reminders, receipts, and administrative notices. We may also store correspondence and internal notes related to your inquiry or order.

We may use third-party communication vendors, including email delivery providers such as Resend, to send and manage communications. If you provide a phone number, we may also use it for service-related calls or texts, subject to applicable law.

8. How We Share Information

We do not sell your personal information for money. We may share information as reasonably necessary to operate our business and provide services.

• With service providers that help us operate the site or business, including hosting providers, analytics providers, email vendors, payment processors, and technical support providers.
• With credentialing-related platforms, payers, portals, and other third parties when needed to perform services you requested or authorized.
• With professional advisors, auditors, insurers, and legal counsel as needed for business operations, compliance, or dispute resolution.
• In connection with a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction.
• When required or permitted by law, regulation, subpoena, court order, or other lawful process, or when we believe disclosure is reasonably necessary to protect rights, safety, property, or prevent fraud or abuse.

9. Sale, Targeted Advertising, and Deidentified Information

We do not sell personal information for money, and we do not currently share personal information for cross-context behavioral advertising as those terms are defined in certain U.S. privacy laws.

We may create and use aggregated, deidentified, or anonymized information for analytics, service improvement, business planning, fraud prevention, and similar lawful purposes, provided that the information is not reasonably used to identify you.

10. Data Retention

We retain information for as long as reasonably necessary for the purposes described in this policy, including to provide services, maintain records, comply with legal obligations, resolve disputes, enforce agreements, and support legitimate business operations.

Retention periods may vary depending on the nature of the information, applicable legal requirements, and operational needs. In some cases, we may retain limited information after account closure or completion of services where reasonably necessary for fraud prevention, compliance, recordkeeping, backup, or legal purposes.

11. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. However, no method of transmission over the internet or method of storage is completely secure, and we cannot guarantee absolute security.

You are responsible for using secure devices, safeguarding account access or credentials you control, and sending information to us only through channels you are authorized to use.

12. Your Choices and Rights

Depending on where you live, you may have rights regarding the personal information we hold about you, such as rights to request access, correction, deletion, or a copy of certain information, or to object to or limit certain processing.

To make a privacy-related request, contact hello@getpaneled.com. We may need to verify your identity before processing a request, and some rights may be limited by law or subject to applicable exceptions.

• You can request updates or corrections to information that is inaccurate or incomplete.
• You can ask us to delete certain information, subject to legal, contractual, and operational retention needs.
• You can opt out of non-essential promotional communications, though we may still send transactional or service-related messages.
• You can manage cookies and similar technologies through your browser or device settings where available.

13. U.S. State Privacy Rights and Appeals

If U.S. state privacy laws apply to our processing of your information, you may have additional rights such as the right to know, access, correct, delete, or obtain a portable copy of certain information, as well as the right to appeal a denied request where required by law.

You may submit a request or appeal by emailing hello@getpaneled.com with enough information for us to understand your request and verify your identity. Authorized agents may make requests on your behalf where permitted by law and subject to verification requirements.

14. Global Privacy Control and Do Not Track

Some browsers and extensions offer opt-out preference signals such as Global Privacy Control. Where required by applicable law, we will process such signals in accordance with legal requirements.

Because there is not yet a single consistent industry standard for every browser-based signal, the site may not respond to every do-not-track mechanism unless required by law.

15. Children's Privacy

The site and services are intended for adults and business use, not for children under 18. We do not knowingly collect personal information from children through the site for our ordinary business workflows. If you believe a child has provided information to us inappropriately, contact us and we will take appropriate steps to review and address the issue.

16. U.S.-Based Services and International Transfers

GetPaneled is based in the United States, and information may be stored or processed in the United States or other locations where our service providers operate. If you access the site from outside the United States, you understand that your information may be transferred to and processed in jurisdictions that may not provide the same level of data protection as your home jurisdiction.

17. Third-Party Websites and Services

The site may link to or integrate with third-party sites and services, including payment processors, credentialing-related platforms, and external tools. We are not responsible for the privacy, security, or content practices of those third parties. You should review their applicable terms and privacy notices before using them.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The revised version will be effective when posted unless a later date is stated. If we make material changes, we may also provide additional notice through the site or direct communications where appropriate.

19. Contact Us

If you have questions about this Privacy Policy or want to submit a privacy-related request, contact hello@getpaneled.com.