Privacy Policy

BoomCloud Apps Inc. builds patient membership plan software for dental, medical, optometry, chiropractic, med spa, massage and veterinary practices. We are the data controller for information collected through this website, and a data processor for member information our customers manage inside the platform.

You give us: name, practice name, email, phone and message content when you request a demo, contact us or create an account.

Automatically: IP address, device and browser type, pages viewed and referring URL. Analytics of this kind only runs after you accept analytics cookies.

On behalf of customers: member records, plan enrollment and billing status entered by practices using the platform.

To provide and secure the service, respond to enquiries, process payments, send service and (where permitted) marketing communications, and improve the product. We do not sell personal information.

Service providers who work for us under contract: hosting and database infrastructure, payment processing, email delivery, analytics and customer support tooling. We also disclose information where required by law.

Where a practice's use of BoomCloud involves protected health information, we act as a business associate and handle that information under a business associate agreement and applicable HIPAA safeguards. We do not use PHI for marketing.

We keep account and member data for as long as the account is active, and for up to 30 days after cancellation to allow export, after which it is deleted from active systems. Backups age out on a rolling schedule.

Depending on where you live (including under GDPR and the CCPA/CPRA) you can request access to your personal data, correction of inaccurate data, deletion of your data, a portable copy, and to opt out of marketing or the sale/sharing of personal information — which we do not do.

To make a data request, email privacy@boomcloudapps.com with the subject "Data request." We verify identity before acting and respond within 30 days. If your data was entered by a practice, we forward the request to that practice as the controller.

We use essential cookies to run the site, and analytics cookies only with consent. Details and how to change your choice are in our cookie policy.

Data is stored in the United States. We use encryption in transit and at rest, role-based access control and least-privilege database policies. No system is perfectly secure; we notify affected users of a breach as required by law.

The website is not directed to children under 13 and we do not knowingly collect their information through it.