This Privacy Policy describes how Amino Stack IQ ("we," "us," "our") collects, uses, and discloses personal information when you visit aminostackiq.com, create an account, or otherwise interact with our services (the "Services"). Clinic and organization customers should also review the Clinic Privacy Notice and Organization Privacy Addendum, which govern protected health information ("PHI") and customer data on their respective portals.
1. Information we collect
You provide directly
- Account information: name, email, password hash, role (clinic, organization, admin).
- Business information: clinic or organization name, address, billing contact.
- Communications: sales inquiries, support requests, feedback.
Collected automatically
- Device and log data: IP address, user agent, timestamps, pages viewed.
- Authentication cookies and session tokens needed to keep you signed in.
- Limited diagnostic telemetry for error reporting and reliability.
From third parties
- Payment processors (e.g., for subscription billing) confirm transaction status.
- Identity providers (e.g., Google) when you choose to sign in with them.
2. How we use information
- To provide, maintain, secure, and improve the Services.
- To authenticate users and enforce role-based access control.
- To bill subscriptions and reconcile transactions.
- To send transactional emails (verification, password reset, receipts, security notices).
- To respond to inquiries and provide support.
- To comply with legal obligations and enforce our Terms.
3. Legal bases (EEA/UK)
Where the EU/UK GDPR applies, we rely on: performance of a contract (account and billing), legitimate interests (security, product improvement), consent (optional marketing), and legal obligations (tax, recordkeeping).
4. How we share information
We do not sell personal information. We share only as needed with:
- Service providers (hosting, database, email delivery, payments) under written contracts.
- Affiliates and successors in connection with a corporate transaction.
- Authorities when required by law or to protect rights, safety, and security.
5. Sub-processors
A current list of sub-processors is available on request to support@aminostackiq.com. Changes are communicated to administrators with reasonable notice.
6. Retention
We retain personal information for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce agreements. Audit logs are retained for a default of seven (7) years for compliance.
7. Security
- Encryption at rest (AES-256) and in transit (TLS 1.2+).
- Role-based access control with row-level security on PHI tables.
- Least-privilege service roles; production secrets isolated from the application bundle.
- Continuous monitoring, vulnerability scanning, and incident response procedures.
8. Your rights
Depending on your jurisdiction, you may have rights to access, correct, delete, port, or restrict processing of your personal information, and to object to certain uses. Contact support@aminostackiq.com to exercise these rights. Patient rights handled by clinic customers are described in the Clinic Privacy Notice.
9. Children
The Services are not directed to children under 13 (or the equivalent age in your jurisdiction). We do not knowingly collect their personal information.
10. International transfers
Our infrastructure is operated primarily in the United States. Where data is transferred from other regions, we rely on appropriate safeguards such as Standard Contractual Clauses.
11. Changes
We may update this Policy from time to time. Material changes will be communicated by email or in-product notice.
12. Contact
Amino Stack IQ, 915 Cimarron Circle, Bradenton, FL 34209, USA. Email: support@aminostackiq.com.