Privacy policy
This describes what the Institute actually collects and what it does with it. If something here is wrong or unclear, write to [email protected] and it will be corrected.
Who we are
The Healthcare AI Institute publishes operational books, toolkits and a weekly newsletter at healthcareaiops.com. We are the data controller for everything described below. Contact: [email protected].
What we collect, and why
| What | When | Why |
|---|---|---|
| Your email address, and which page you subscribed from | When you subscribe to The Operations Edge | To send you the newsletter, and to know which pages bring people in. Consent. |
| Your email address and purchase record | When you buy a toolkit or a licence | To give you access to what you paid for, and to let you sign back in and download it again. Contract. |
| Your name, email and message | When you use the contact or bulk order form | To reply to you. Legitimate interest. |
| A short-lived sign-in token | When you request a sign-in link | To prove it is you without making you keep a password. Contract. |
| The working state of the interactive tools in your library — scorecard entries, checklist progress, contract review notes | When you use an interactive tool while signed in | To save your work to your account so you can continue on another device. Contract. Delete it any time by clearing a tool and letting it re-sync, or by asking us. |
| Aggregate page views, with no cookie and no cross-site identifier | Whenever anyone visits | To know which pages are read. Legitimate interest. |
We do not collect health information, we do not ask for it, and nothing on this site should be used to transmit it. If you send patient information to us by mistake, tell us and we will delete it.
What we never do
We do not sell, rent or share your email address. We do not share it with vendors, and we take no referral fees, so there is no commercial reason for your details to leave the Institute. We run no advertising network, no retargeting pixels and no third-party trackers.
Who processes data on our behalf
| Processor | What they handle |
|---|---|
| Cloudflare | Hosting, the database holding subscribers and purchases, and file storage for downloads |
| Stripe | Payments. Card details go directly to Stripe and never reach our systems |
| MailerLite | Sending the newsletter |
| Resend | Sending transactional email, such as sign-in links and receipts |
Each of these processes data in the United States and under their own published terms. We hold the record of who subscribed and what they bought in our own database so that changing any one of these providers never costs you your access.
Payments
We never see or store your card number, expiry date or security code. Checkout is handled entirely by Stripe. We receive only a confirmation that a payment succeeded, the email address you used, and what you bought.
How long we keep things
Newsletter subscriptions are kept until you unsubscribe, then the address is marked unsubscribed and retained only so we do not accidentally mail you again. Purchase records are kept for seven years, because tax law requires us to be able to evidence a sale. Sign-in tokens expire within the hour. Contact messages are kept for two years.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to [email protected] and we will act within thirty days. Every newsletter carries a one-click unsubscribe link and using it is always enough, you never have to email anyone to get off the list.
If you are in the EEA or the UK, you also have the right to complain to your data protection authority. If you are in California, we do not sell or share personal information as those terms are defined by the CCPA, and we will not discriminate against you for exercising any right above.
Cookies
We set one cookie, and only after you sign in: a session cookie that keeps you signed in to your library. It is essential to the service, it is not used for tracking, and it disappears when the session ends. We use no advertising or analytics cookies, which is why you are not being asked to dismiss a consent banner.
Children
This site is for healthcare professionals and is not directed at anyone under sixteen.
Changes
If this policy changes materially we will say so in the newsletter rather than quietly changing the date at the top.