Privacy Policy

Last updated: May 2026

1. Introduction

This Privacy Policy explains how Ambassador HQ collects, uses, and protects your information.

2. Information We Collect

Account information (name, email, practice name); usage data (visits logged, features used); payment information (processed by Stripe — we never store card details); location data (GPS coordinates at clock-in and clock-out only, stored securely); and uploaded files (expense receipts stored in Supabase storage).

3. How We Use Your Information

To provide and improve the service, to process payments via Stripe, to send transactional emails via Resend, and to provide customer support. We do not use your data for advertising and we do not sell your data.

4. Data Storage & Security

Data is stored in Supabase (SOC 2 compliant). Payments are processed by Stripe (PCI DSS compliant). Emails are sent via Resend. Data is encrypted in transit and at rest. Row-level security isolates each practice's data.

5. Not a HIPAA Covered Entity

Ambassador HQ is a business operations tool and is not a HIPAA covered entity. Do not store patient names, dates of birth, health conditions, or any other protected health information (PHI) in Ambassador HQ. Referral tracking should use patient identifiers only, not clinical information.

6. Canadian Privacy (PIPEDA)

For Canadian users, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to access, correct, or delete your personal information. Contact team@ahqapp.com to exercise these rights.

7. Cookies

We use essential cookies only for authentication and session management. We do not use advertising or tracking cookies.

8. Data Retention

Active account data is retained indefinitely. Cancelled account data is retained for 30 days, after which all data is permanently deleted. You may request immediate deletion by emailing team@ahqapp.com.

9. Third Party Services

Stripe (payment processing) — stripe.com/privacy. Supabase (data storage) — supabase.com/privacy. Resend (email delivery) — resend.com/privacy. Google Maps (route planning) — policies.google.com/privacy.

10. Contact

For privacy questions or data requests contact us at team@ahqapp.com.