Privacy Policy

Last updated: September 6, 2025

Last Updated: January 23, 2025

Tendral Health LLC ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our survey platform.

Important Notice

We do not collect, process, or store Protected Health Information (PHI) as defined by HIPAA. Our platform is designed for healthcare market research and professional surveys that do not involve patient data.

Information We Collect

Personal Information

  • Name and contact information (email, phone number)
  • Professional credentials (for clinician verification)
  • Payment information (processed securely by Stripe)
  • Survey responses and research data

Device and Browser Information

When you access our surveys, we automatically collect:

  • Browser Information: Browser type and version, operating system and version, platform information
  • Device Specifications: Device type (desktop, mobile, tablet), screen resolution, viewport dimensions, hardware specifications (processor cores, device memory), timezone and language preferences
  • Device Fingerprints: Canvas, WebGL, and audio fingerprints for unique device identification and fraud prevention

Network and Connection Data

We collect information about your network connection to ensure service quality and security:

  • IP Address and ISP: Your IP address, Internet Service Provider (ISP), and network organization
  • Connection Type: WiFi, cellular, ethernet, and connection speed information
  • Security Detection: VPN, proxy, or TOR usage detection, hosting provider detection, and threat level assessment

Geographic Information

Based on your IP address, we determine approximate location data:

  • Country, state/region, and city
  • Postal code
  • Approximate latitude and longitude (city-level precision only)

Survey Access Information

We track how you interact with our surveys:

  • Access Patterns: Survey access timestamps, session duration, completion status and progress, number of surveys accessed
  • Source Tracking: Entry source and referrer URL, UTM campaign parameters (source, medium, campaign, term, content)
  • Session Information: Session identifiers to group related activities, return visitor detection, page views per session

How We Use Your Information

We use your information for the following purposes:

Service Delivery

  • Provide and maintain our survey platform
  • Process payments and manage accounts
  • Verify professional credentials
  • Communicate with you about our services

Security and Fraud Prevention

  • Detect and prevent fraudulent survey responses
  • Identify automated bot activity
  • Monitor for unusual access patterns
  • Prevent duplicate submissions
  • Protect the integrity of survey data

Analytics and Improvement

  • Understand survey engagement patterns
  • Optimize survey performance across devices
  • Analyze geographic distribution of respondents
  • Measure marketing campaign effectiveness
  • Improve user experience

Quality Assurance

  • Ensure response data quality
  • Identify technical issues
  • Monitor system performance
  • Validate respondent authenticity

Legal and Compliance

  • Comply with legal obligations
  • Respond to legal requests and prevent harm
  • Enforce our terms of service

Legal Basis for Processing: We collect and process this information based on our legitimate business interests in maintaining platform security, preventing fraud and abuse, improving our services, and ensuring data quality. Where required by law, we will obtain your consent for specific processing activities.

Information Sharing

We may share your information with:

Service Providers

Third-party vendors who assist in our operations

Survey Clients

Aggregated, anonymized research data only

Legal Authorities

When required by law or to protect our rights

Business Transfers

In connection with mergers or acquisitions

Data Security

We implement appropriate technical and organizational measures to protect your information, including:

  • Encryption of data in transit and at rest
  • Access controls and authentication
  • Regular security assessments
  • Secure hosting infrastructure

Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

  • Account Information: Retained for the duration of your account and up to 3 years after account closure
  • Survey Responses: Retained for the period required by our research clients, typically 2-5 years
  • Access Logs and Tracking Data: Automatically deleted after 180 days for security and analytical purposes
  • Aggregated Statistical Data: May be retained indefinitely in anonymized form
  • Legal Compliance: Data may be retained longer if required by law or legal proceedings

Third-Party Services

We use the following third-party services to provide and improve our platform:

  • Supabase: Database and authentication services
  • Stripe: Payment processing and financial services
  • IP Geolocation Services: For determining approximate location from IP addresses
  • Web Analytics Tools: For understanding platform usage and performance

These services have their own privacy policies and we encourage you to review them. We only share the minimum information necessary for these services to function.

Your Rights

As a user in the United States, you have the right to:

  • Access Your Information: Request a copy of the personal information we hold about you
  • Correct Your Information: Request correction of any inaccurate or incomplete information
  • Delete Your Information: Request deletion of your personal information (subject to legal retention requirements)
  • Opt-Out of Certain Data Collection: You can opt-out of certain tracking via browser settings (disable cookies, use private browsing, block JavaScript)
  • Data Portability: Request your data in a structured, commonly used format
  • California Residents: Additional rights under CCPA including the right to know, delete, opt-out of sale (we do not sell personal information), and non-discrimination

To exercise any of these rights, please contact us at privacy@tendralhealth.com. We will respond to your request within 30 days.

Cookies and Tracking

We use cookies and similar technologies to enhance your experience. You can manage your cookie preferences through your browser settings. For more information, see our Cookie Policy.

International Data Transfers

Your information may be transferred to and processed in countries other than your residence. We ensure appropriate safeguards are in place for such transfers.

Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: privacy@tendralhealth.com
Address: Tendral Health LLC, 123 Healthcare Way, Suite 100, San Francisco, CA 94105