Privacy Policy

Buxbells is a healthcare regulatory intelligence and compliance workspace operated by Buxbells Resources LLC, a United States company. Buxbells is not a law firm and does not provide legal advice.

The information below reflects what the product actually collects today.

• Account information: the email address you sign in with, your password credential as managed by our authentication provider, and account status.
• User profile information: the display name and email stored on your profile record.
• Organization / workspace information: workspace name, organization type, primary location, contacts, jurisdictions, facilities, membership records, and roles.
• Organization regulatory profiles: the organization types, service lines, regulatory characteristics, and jurisdictions you select so applicability signals can be generated.
• Compliance records you create: compliance actions, policies, evidence records and their metadata and attached notes, review dates, owners, and status history.
• Application activity: audit and activity events recording who created or changed a record, when, and which fields changed, plus ingestion run history.
• Notifications and communications: in-app notifications, notification preferences, queued email messages, and workspace invitations.
• Billing and subscription metadata: plan, subscription status, trial dates, and usage counts. We do not process card numbers, and no payment processor is connected today.
• Regulatory source material: information retrieved from public government sources, retained with the source reference so it can be verified.

Please do not submit protected health information (PHI), patient records, or unnecessary patient-identifiable information to Buxbells unless your organization has received explicit written authorization from Buxbells Resources LLC for that use. Buxbells is designed for regulatory intelligence and compliance workflow content, not clinical records. See our Terms of Service for the current PHI position.

• To provide, operate, and support the workspace and its features.
• To authenticate users and enforce organization isolation and role-based access.
• To generate applicability signals and reporting from information you provide.
• To retrieve and attribute regulatory information from public government sources.
• To send service, workflow, deadline, and invitation notifications you or your administrators configure.
• To maintain audit and security history and to detect, investigate, and prevent misuse.
• To administer subscriptions, plan entitlements, and support requests.
• To comply with legal obligations that apply to us.

We do not sell personal information, and we do not use your compliance content for advertising.

Buxbells currently uses only technologies that are essential to operating the application:

• Authentication session storage in your browser, managed by our authentication provider, so you stay signed in.
• A browser storage entry recording which workspace you last had selected.
• A cookie recording whether the navigation sidebar is expanded or collapsed.

We do not currently deploy advertising trackers, third-party marketing pixels, or cross-site behavioural analytics in the application, which is why you are not asked for tracking consent. If that changes, this policy will be updated and appropriate consent controls will be added before any non-essential technology is used.

We use a small number of infrastructure providers to run the service, including a managed application hosting and database/authentication platform. These providers process information on our behalf under their agreements with us and are not permitted to use your content for their own purposes. Regulatory information is retrieved from public government publications and APIs.

Access requires authentication, workspace data is isolated per organization and enforced server-side, roles limit what each member can change, and meaningful changes are recorded in an audit history. Our Security page describes the controls in place. No system can be guaranteed secure, and we do not claim certifications we have not obtained.

We retain workspace records for as long as your organization maintains its workspace, and for a limited period afterwards so records can be restored or exported and so audit and security history remains meaningful. Cancelling or downgrading a subscription does not itself delete your compliance records. Audit and activity events are retained as written and are not editable in the product.

• Access and correct your profile and workspace records inside the application.
• Adjust notification preferences in Settings.
• Ask an organization administrator to change your role or remove your access.
• Request deletion of your account, or deletion or export of an organization workspace, by writing to privacy@buxbells.com. We will verify the request with an organization administrator before acting on workspace-wide requests.

Where state privacy laws give you additional rights, we will honour verified requests as those laws require.

Buxbells Resources LLC operates Buxbells in the United States, and information is processed in the United States by us and our infrastructure providers.

Buxbells is a business tool intended for organizational use by adults. It is not directed to children, and we do not knowingly collect information from children under 13.

We may update this policy as the product evolves. The version identifier and last-updated date above will change, and material changes will be communicated to workspace administrators.

Privacy questions and requests: privacy@buxbells.com. General support: support@buxbells.com. Security reports: security@buxbells.com.