Privacy Policy

1. Information We Collect

When you sign up for an API key, we collect:

• Account information: email address, full name, organization, website, and use case description.
• Usage data: API request logs including endpoints accessed, timestamps, IP addresses, and response codes.

We do not collect any personal health information (PHI). All healthcare data served by the API is publicly available CMS data about facilities and providers, not about individual patients.

2. How We Use Your Information

• To provide and maintain the Service.
• To enforce rate limits and prevent abuse.
• To communicate with you about your account, service updates, or security issues.
• To improve the Service based on aggregate usage patterns.

3. Data Sharing

We do not sell your personal information. We may share information only in these circumstances:

• With your consent.
• To comply with legal obligations.
• With service providers who assist in operating the Service (e.g., hosting providers), under strict confidentiality agreements.

4. Data Retention

Account information is retained for the duration of your account. API request logs are retained for 90 days for operational purposes. You may request deletion of your account and associated data at any time.

5. Security

We implement reasonable security measures including encrypted connections (TLS), hashed API keys, and access controls. However, no system is completely secure. You are responsible for safeguarding your API key.

6. Your Rights

You may:

• Request access to data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and data.
• Opt out of non-essential communications.

To exercise these rights, email api@verzihealth.com.

7. Cookies

The API itself does not use cookies. Our landing page and documentation may use minimal analytics. No third-party tracking cookies are used.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email. Continued use of the Service after changes constitutes acceptance.

9. Contact

For privacy-related questions: api@verzihealth.com