Privacy Policy

Information We Collect

We collect:

• Account information you provide (name, email, clinic name, practice location).
• Billing and purchase info (handled through Stripe; we do not store full card numbers).
• Usage data inside the platform and PWA: which videos you view, which Share Links you generate, which domains you verify, which playlists you build for Waiting-Room TV, etc.
• Device and technical data: IP address, browser/OS, screen size, referral headers.
• Event/activity data: "view started," "view completed," "QR scanned," "book click," "embed generated," etc. We log that to prevent abuse, troubleshoot, and improve performance.
• Support messages you send us.

We do not want PHI (Protected Health Information). You agree not to upload or enter PHI (for example: patient names, identifiers, photos with identifiable faces, birthdates, MRNs, etc.). We do not operate as a HIPAA Business Associate.

How We Use Your Information

We use information to:

• provide the Service (streaming, embed, Waiting-Room TV, downloads),
• verify entitlement and enforce content protection (authorized domains, time-limited links, trial expiration),
• generate analytics and dashboards for you (views, completions, QR scans, booking clicks),
• send transactional emails (purchase confirmations, onboarding, trial reminders, etc.),
• send necessary service alerts (security alerts, policy updates).

We may also use aggregate / de-identified data to understand which procedures are most viewed, which features are being used, and to guide product development.

We do not sell your personal information to data brokers.

Storage & Security

Your account data is stored in managed infrastructure (for example Supabase/Postgres) and video delivery is served through CDN and tokenized streaming. We apply reasonable security, including token-based access, domain whitelisting for embeds, and expiring Share Links.

No system is 100% secure. You use the Service at your own risk.

Third-Party Services

We use third-party processors such as:

• Stripe (payment processing),
• Supabase (authentication / database),
• Cloudflare Stream & R2 (video delivery / streaming protection / secure file storage),
• Resend (transactional email delivery - purchase confirmations, onboarding emails, trial reminders, etc.),
• Google Analytics 4 (GA4) (website analytics, user behavior tracking, conversion measurement),
• Meta Pixel (Facebook Pixel) (advertising analytics, conversion tracking, retargeting - you can opt out via cookie settings),
• OneSignal (push notifications - you control whether to enable push notifications in your browser/PWA settings),

to operate the Service. These providers may process limited personal or technical data under their own terms and privacy policies.

You control:

• Push notifications: Enable/disable in your browser or PWA app settings
• Cookies & tracking: Manage via our cookie consent banner or browser settings

Retention

We keep account data, billing records, entitlement records, and audit logs for as long as needed for legal, tax, fraud-prevention, or product operation purposes.

We may retain anonymized analytics and playback data indefinitely.

Your Rights / Contact

You can request:

• access to the data we hold about you,
• correction of inaccurate data,
• deletion of certain data (subject to us keeping what we're legally required to keep, like invoices),

by emailing privacy@plastictouch.tv.

If you believe an account is using your clinic identity or brand without authorization, contact legal@plastictouch.tv.

Children / Minors

This Service is not directed to minors. You must be at least 18 to create an account.

Changes

We may update this Privacy Policy. If we make material changes, we will update the "Last updated" date. Continued use after the update means you accept the new version.