Privacy Policy

Last updated: March 23, 2026

1. Introduction

Consentify LLC ("Consentify," "we," "us," or "our") operates the Consentify platform, including the website at getconsentify.com, the Consentify iOS application, and related services (collectively, the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, password, and business name when you create an account.
  • Form Data: Information submitted through consent forms created on the platform, including client names, contact details, medical history, signatures, and photographs.
  • Contact Information: Name, email, phone number, and message content when you contact us through our website.
  • Payment Information: Subscriptions are billed by Apple through In-App Purchase; affiliate payouts are processed by Stripe. We never receive or store credit card numbers on our servers.

2.2 Information Collected Automatically

  • Usage Data: IP address, browser type, pages visited, and timestamps.
  • Signature Audit Data: When a consent form is signed, we record the submission timestamp and the IP address of the device used to sign. This information is part of the form's tamper-evident audit record, is visible only to the practice that owns the form, and is never included in emails or client-facing documents.
  • Device Information: Device type, operating system, and unique device identifiers.
  • Cookies: We use essential cookies for authentication and session management.

3. How We Use Your Information

We use collected information to:

  • Provide, maintain, and improve the Service.
  • Process form submissions, generate PDFs, and send email/SMS confirmations.
  • Manage your account and process subscription payments.
  • Respond to your inquiries and provide customer support.
  • Detect, prevent, and address security issues and fraud.
  • Comply with legal obligations and applicable privacy regulations.

4. Data Storage and Security

All data is stored on Amazon Web Services (AWS) infrastructure in the United States. We implement the following security measures:

  • Encryption: AES-256 encryption at rest and TLS 1.2+ encryption in transit.
  • Access Controls: Role-based access control (RBAC) with multi-factor authentication.
  • Backups: Automated backups every 4 hours with point-in-time recovery.
  • Audit Logs: Immutable logs of all data access and modifications.

5. Healthcare Data

Consentify is HIPAA compliant, featuring AES-256 encryption, immutable audit trails, role-based access controls, and hardware-backed security keys. A Business Associate Agreement (BAA) is included on the Elite and Empire plans and can be reviewed and signed electronically in the app (Settings > Legal). Questions: support@getconsentify.com.

6. Data Privacy Rights

We respect your data privacy rights. Users have the following rights:

  • Right to Access: Request a copy of personal data we hold about you.
  • Right to Correction: Request correction of inaccurate personal data.
  • Right to Deletion: Request permanent deletion of your personal data.
  • Right to Data Portability: Receive your data in a commonly used, machine-readable format.
  • Right to Opt Out: Opt out of the sale of personal data or targeted advertising.

To exercise these rights, contact us at support@getconsentify.com. We will respond within 45 days.

7. Data Sharing and Disclosure

We do not sell your personal data. We may share information with:

  • Service Providers: AWS (hosting), Stripe (payments), Amazon SES (email), Amazon SNS (SMS) — bound by data processing agreements.
  • Legal Requirements: When required by law, court order, or governmental regulation.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Form submission data is retained according to your subscription plan settings. Upon account deletion, we permanently remove all associated data within 30 days, except where retention is required by law.

9. Children's Privacy

The Service is not directed to individuals under 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal data, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Consentify LLC
Email: support@getconsentify.com