Privacy Policy

1. Who we are

This site is operated by [Your legal entity name] (“we”, “us”), [Your business address]. You can contact us at hello@example.com or through the contact page.

2. What this site does today

The site provides information pages, the HL7 Inspector, a contact form, and free user accounts with a dashboard. Paid plans and payments are not available, and we hold no payment details.

3. Information we handle

• Text you submit to the Inspector. When you choose Inspect Message, the text is sent to this site's server, parsed in memory and returned to you. We do not save it to a database or session, write it to application logs, or send it to third parties. It is discarded when the request ends. Ordinary web server logs may record request details such as time, IP address and URL, but we do not log message content.
• Contact form details. If you use the contact form, we receive your name, email address, chosen topic and message so that we can respond.
• Server logs. Our hosting provider and web server record technical data such as IP address, browser type, pages requested and timestamps. This is used to operate and secure the site.
• Account details. If you create an account we store your name, email address and a one-way hash of your password (never the password itself), your plan, and timestamps such as when you registered and last logged in.
• Usage counts. For signed-in users we count how many inspections you run each month so plan limits can be applied. We store the count only, never the message.
• Security data. To limit password guessing and sign-up abuse we keep short-lived counters keyed by a keyed hash of your IP address or email address, not the raw values. Password-reset links are stored only as a hash and expire after a short time.

4. Health information

This site is not designed to receive protected health information or other personal health data. Please use synthetic or properly de-identified messages only in the Inspector, and do not include patient information in the contact form. If you send such information by mistake, contact us and we will delete it.

5. How we use information

We use contact details to answer your message. We use log data to run, secure and troubleshoot the site and to detect abuse. We do not sell personal information.

6. Cookies

Pages that contain a form (such as the contact and login pages) set one session cookie, hl7tk_sid. It holds a security token that protects forms and, after you log in, identifies your signed-in session. It is HttpOnly, is marked Secure on HTTPS, and is deleted when you close your browser. Signed-in sessions also end after a period of inactivity. We do not currently use advertising or analytics cookies. If that changes, we will update this policy first.

7. Sharing

We use service providers, such as web hosting and email who process data on our behalf. We may disclose information when the law requires it or to protect the rights and security of the site and its users.

8. Retention

We keep contact messages only as long as needed to handle your request and keep a reasonable record of it, unless the law requires a longer period. Account details are kept until you ask us to delete your account. Password-reset and rate-limit records are deleted automatically soon after they expire. Server logs are kept for the period set by our hosting provider.

9. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete or restrict the use of your personal information. To make a request, including a request to delete your account, contact us using the details above.

10. Security

We apply reasonable technical measures, including password hashing, a restrictive content security policy, protection of forms against cross-site request forgery, and rate limiting of sign-in attempts. No method of transmission or storage is completely secure.

11. Children

The site is intended for professional users and is not directed to children under 16.

12. Changes

We may update this policy as the product develops. The date at the top shows the latest revision.