Privacy Policy

Tendral Health LLC, doing business as Tendral ("Tendral," "we," "our," or "us"), respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our healthcare market research platform. Our services are intended for users in the United States.

Important Notice

We do not collect, process, or store Protected Health Information (PHI) as defined by HIPAA. Our platform is designed for healthcare market research and professional surveys that do not involve patient data.

Information We Collect

Personal Information

Name and contact information (email, phone number)
Professional credentials (NPI, specialty, practice setting, license information)
Survey responses and research data

Identity Verification and Biometric Information

To confirm that you are the licensed clinician associated with your NPI — which is required before you can withdraw earnings and before your responses are delivered to a Survey Sponsor — we use a third-party identity-verification provider. Depending on the verification method, this may involve:

Government-issued identification (such as a driver's license or passport), and
A facial image with liveness detection (a "selfie" and a short live capture). This facial data is a biometric identifier.

The identity document images and biometric data are collected and stored by our identity-verification provider, not by Tendral. We retain only the outcome of the check (pass or fail), the result of matching the verified name against the public NPI registry, the verification method, and a provider reference identifier. Tendral does not store your ID images or your facial/biometric data. We ask for your consent before any biometric information is collected, and we use it solely for identity verification and fraud prevention — never to sell, and never for advertising.

Payment and Financial Information

When you set up a payout method to receive compensation, we and our payment and payout processors collect information needed to pay you and to comply with applicable financial regulations:

Your legal name and email address
Bank account information, which is tokenized by our processor. We store only a reference to the payout method and the last four digits of the account for display — never the full account or routing number.
The IP address and approximate location captured at the time you set up a payout method, for fraud prevention.
Additional identity information (such as date of birth, a portion or all of a government identification number, or address) only if our payment processor is required to collect it to satisfy its "know your customer" and anti-money-laundering obligations at higher payout volumes.

Device and Browser Information

When you access our surveys, we automatically collect:

Browser Information: Browser type and version, operating system and version, platform information
Device Specifications: Device type (desktop, mobile, tablet), screen resolution, viewport dimensions, hardware specifications (processor cores, device memory), timezone and language preferences
Device Fingerprints: Canvas, WebGL, and audio fingerprints for unique device identification and fraud prevention

Network and Connection Data

We collect information about your network connection to ensure service quality and security:

IP Address and ISP: Your IP address, Internet Service Provider (ISP), and network organization
Connection Type: WiFi, cellular, ethernet, and connection speed information
Security Detection: VPN, proxy, or TOR usage detection, hosting provider detection, and threat level assessment

Geographic Information

Based on your IP address, we determine approximate location data:

Country, state/region, and city
Postal code (3-digit level for reporting purposes)
Approximate latitude and longitude (city-level precision only)

Survey Access and Interaction Information

We track how you interact with our surveys, including for quality assurance and fraud prevention:

Access Patterns: Survey access timestamps, session duration, completion status and progress, number of surveys accessed
Interaction Signals: Timing and pattern signals such as keystroke timing, paste activity, active typing time, and focus/tab changes, used to assess response quality and detect automated or fraudulent activity
Source Tracking: Entry source and referrer URL, UTM campaign parameters (source, medium, campaign, term, content)
Session Information: Session identifiers to group related activities, return-visitor detection, and page views per session
Session Recording: We record survey sessions (see "Cookies, Tracking, and Session Recording" below).
Voice Input: If you choose to dictate an answer, your speech is transcribed to text in real time by a third-party provider. We do not record or store the audio — only the resulting text, which you can review and edit before submitting.

Information We Obtain from Other Sources

In addition to information you provide directly, we obtain professional and contact information about clinicians from other sources, including in order to reach clinicians who may be a fit for our research before they have created an account. The categories of sources include:

Public professional registries — such as the NPPES / National Provider Identifier registry maintained by the Centers for Medicare & Medicaid Services (name, specialty, license, and practice information)
Identity-verification providers — the verified-name and check-outcome data described above
Data brokers and people-search / contact-data providers — which may supply professional or personal contact details (such as email addresses)
Publicly available web sources — professional listings and publications

We use this information to identify and contact clinicians about research opportunities, to verify professional identity, and to improve the accuracy of our records. If you receive outreach from us and do not wish to be contacted, you can opt out using the link in the message or by contacting us at privacy@tendralhealth.com.

How We Use Your Information

We use your information for the following purposes:

Service Delivery

Provide and maintain our survey platform
Process payments and manage accounts
Verify professional identity and credentials
Communicate with you about our services

Security and Fraud Prevention

Verify that respondents are the real, licensed clinicians they claim to be
Detect and prevent fraudulent survey responses
Identify automated bot activity
Monitor for unusual access patterns and prevent duplicate submissions
Protect the integrity of survey data and payouts

Analytics and Improvement

Understand survey engagement patterns
Optimize survey performance across devices
Analyze geographic distribution of respondents
Measure marketing campaign effectiveness
Improve user experience

Artificial Intelligence and Machine Learning

Train, develop, and improve machine learning models and AI systems
Develop new products, features, and services powered by AI
Enhance automated quality detection and fraud prevention systems
Create predictive analytics and research insights

These activities may involve processing your data through third-party AI service providers. We do not use your biometric information for these purposes.

Research and Analytics Products

Create research reports and analytics products
Develop industry insights and trend analyses
Generate aggregated datasets for research purposes
Support healthcare market research activities

Legal and Compliance

Comply with legal obligations
Respond to legal requests and prevent harm
Enforce our terms of service

Legal Basis for Processing: We collect and process this information based on our legitimate business interests in maintaining platform security, preventing fraud and abuse, improving our services, ensuring data quality, and developing AI-powered products and research insights; to perform our contract with you; and, where required by law — including for the collection of biometric information — based on your consent.

Automated Decision-Making

To protect the integrity of our platform and our clients' research, we use automated systems that assess the risk that an account, response, or payment is fraudulent or does not come from a genuine, verified clinician. These systems use signals such as identity-verification status, device and network characteristics, and interaction patterns. Based on these assessments, we may automatically:

Hold, delay, or decline a payout pending review
Exclude a response from delivery to a Survey Sponsor or from counting toward a client's quota
Restrict or decline a new account registration
Suspend or terminate an account

These measures are designed to err on the side of protecting research integrity, so a legitimate clinician may occasionally be flagged for review. If you believe an automated decision was made in error, you may request human review by contacting us at privacy@tendralhealth.com, and we will re-evaluate.

Data Security

We implement appropriate technical and organizational measures to protect your information, including:

Encryption of data in transit and at rest
Access controls and authentication
Row-level security on our database
Secure, reputable hosting infrastructure

Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, to provide our services, and to comply with our legal, tax, and regulatory obligations, after which we delete or de-identify it. In particular:

Account and profile information is retained while your account is active and for a reasonable period afterward for compliance and fraud prevention.
Survey responses are retained for operational, research, and analytics purposes. Survey Sponsors receive responses as described in the Information Sharing section.
Aggregated and de-identified data derived from survey responses may be retained indefinitely for research, analytics, and AI/ML development purposes, because it can no longer reasonably be linked to you.
Identity-verification records (the outcome, method, and name-match result — not ID images or biometric data, which are held by our provider) are retained while your account is active and as needed for fraud prevention and legal compliance.
Financial and payout records are retained as required by applicable financial and tax regulations.
Access, security, and diagnostic logs are retained for a limited period appropriate to their purpose; error-monitoring data held by our provider is typically retained for approximately 90 days.

Third-Party Services

We use third-party services to provide and improve our platform. Key categories include:

Hosting and Infrastructure: cloud hosting, database, and caching providers
Payments, Payouts, and Identity Verification: payment and payout processors and identity-verification providers that process payout details and perform identity checks
Incentive Delivery: gift-card and reward fulfillment providers
Communications: email delivery and SMS verification providers
AI Services: AI providers used for AI-powered features and analysis
Voice Transcription: speech-to-text providers that transcribe dictated survey answers in real time
Security and Fraud Prevention: bot-detection, IP-reputation, and device-signal providers
Error Monitoring: application error tracking. When errors occur, we may send technical error data along with your user ID and email address to help diagnose issues.

A current list of our subprocessors is available to clients on request under a non-disclosure agreement. These services have their own privacy practices, and we share only the minimum information necessary for them to function.

Your Rights

As a user in the United States, you have the right to:

Access Your Information: Request a copy of the personal information we hold about you
Correct Your Information: Request correction of any inaccurate or incomplete information
Delete Your Information: Request deletion of your personal information (subject to legal retention requirements and noting that aggregated, de-identified data cannot be deleted)
Opt Out of Outreach: Unsubscribe from marketing communications at any time
Data Portability: Request your data in a structured, commonly used format

To exercise any of these rights, please contact us at privacy@tendralhealth.com. We will respond within the timeframes required by applicable law.

Your California Privacy Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA"), provides you additional rights. This section describes our practices and your rights.

Categories of Personal Information We Collect

Identifiers (name, email, phone, IP address, unique identifiers)
Professional information (NPI, specialty, credentials, license information)
Commercial information (survey responses, payout and transaction records)
Internet and device activity (usage, interaction signals, device fingerprints)
Geolocation data (approximate, IP-based)
Sensitive personal information: biometric information used for identity verification, and financial account information
Inferences and risk assessments used for fraud prevention

Sources, Purposes, and Recipients

We collect this information from the sources described in "Information We Collect" and "Information We Obtain from Other Sources," use it for the business purposes described in "How We Use Your Information," and disclose it to the categories of recipients described in "Information Sharing."

Sale and Sharing of Personal Information

We do not sell personal information that identifies you, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under the CCPA. We do not use or disclose your sensitive personal information for purposes other than those permitted under the CCPA (such as providing our services, verifying identity, and preventing fraud).

Your California Rights

Right to Know / Access: the categories and specific pieces of personal information we have collected about you
Right to Delete your personal information, subject to legal exceptions
Right to Correct inaccurate personal information
Right to Limit Use of Sensitive Personal Information to what is necessary to provide our services (we already limit our use of biometric and financial information to these purposes)
Right to Non-Discrimination for exercising your rights

To exercise these rights, email privacy@tendralhealth.com. We will verify your request using information associated with your account and respond within the timeframes required by the CCPA (generally within 45 days, with one 45-day extension where permitted). You may use an authorized agent to submit a request on your behalf.

Cookies, Tracking, and Session Recording

We use strictly necessary cookies for authentication and session management. These cookies are essential for the platform to function properly.

We use first-party, privacy-friendly analytics to measure performance and usage. These analytics do not use advertising cookies and are not used for cross-context behavioral advertising.

Session recording. To improve usability and detect fraud, we record survey sessions using a session-replay tool. These recordings capture on-screen activity and interactions during the survey. We configure the tool to mask password fields; we do not use it to capture payment card details, and it is used for quality and security purposes, not advertising.

You can manage cookie preferences through your browser settings, though disabling essential cookies may impact your ability to use certain features of our platform.

International Data Transfers

We are based in the United States and our services are intended for U.S. users. Some of our service providers may process data in other countries. Where that occurs, we take steps intended to ensure your information continues to be protected consistent with this Privacy Policy.

Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective as of" date.

Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Tendral Health LLC

Email: privacy@tendralhealth.com