Privacy Policy
Draft pending review by counsel. Not legal advice.
What we store. Your professional profile, licenses, CME, applications, schedule, income estimates, travel plans, and documents you choose to upload. DEA number, date of birth, SSN last-4 and claim descriptions are encrypted in the application before storage. We never store a full SSN or any board portal password.
No patient information.Handler is not designed for protected health information. Don't upload patient records; we warn you if a file looks like one.
Who can see it. Only you, behind mandatory two-factor authentication. Database row-level security restricts every query to your own records. Recipients of share links you create see only the documents you chose, watermarked, until the link expires.
Logs. We record every read and write of your documents and profile (time, action, IP address) and show it to you under Settings → Access log.
Processors. Supabase (database, storage, auth), Vercel (hosting), and — only when configured — Resend (email), Twilio (SMS), Anthropic (reading documents you upload or text you paste, to pre-fill forms), and Google/Duffel (places and travel search).
Your rights. Export everything or delete your account at any time from Settings → Export or delete.
Document upload consent and hold-harmless acknowledgment
Draft — pending review by counsel.
Uploading is your choice. You never have to upload a document to use Handler. Everything you upload, you upload voluntarily and at your own election.
How we protect your documents. Handler uses industry-standard safeguards: encryption in transit (TLS) and at rest, application-layer encryption of sensitive fields such as DEA numbers, mandatory two-factor authentication on every account, a fresh two-factor check before any download or share link, and a log of every access to your documents.
No system is breach-proof. Despite those safeguards, unauthorized access to your data is possible. By uploading, you accept that risk.
Hold harmless. To the fullest extent permitted by law, you agree to hold Handler, its owners, and its operators harmless from any claim, loss, or damage arising from a data breach or unauthorized access to your data that occurs despite the safeguards described above.
Keep your originals. Handler is not your record of last resort. You remain responsible for keeping your own original documents.
Your data is yours. You may export all of your data and documents, or delete your account and everything in it, at any time from Settings.
No patient information. Handler is for your professional credentials only. Do not upload patient records or other protected health information.