1. Who We Are

RepScore Health is operated by JLA Health Tech LLC, a Florida limited liability company ("Company," "we," "us," or "our"). This Privacy Policy explains how we collect, use, store, and protect information when you use our platform at app.repscore.health and related services (collectively, the "Service").

RepScore Health is a B2B SaaS platform serving healthcare business development teams. Our customers are organizations — hospice agencies, home health companies, private duty providers, and senior living operators — not individual consumers.

2. Information We Collect

2.1 Account and Identity Information

When your organization signs up, we collect:

• First and last name
• Work email address
• Phone number (optional)
• Company name and service line
• Job role (Director, VP/Executive)
• Password (stored as a secure hash — we never store plaintext passwords)

2.2 Business Performance Data

The core function of the Service involves collecting and processing BD representative performance data entered by your team, including:

• Monthly admission counts and quotas
• Referral source contact activity and account development metrics
• Territory information and mileage estimates
• Expense records (meals, events, sponsorships)
• Ride-along evaluations and documentation ratings
• Roleplay session transcripts and AI-generated scores

This data pertains to the business activity of your BD representatives — it does not include patient names, diagnoses, treatment records, or any Protected Health Information (PHI) as defined under HIPAA.

2.3 Payment Information

Subscription payments are processed by Stripe, Inc. We do not store credit card numbers or full payment details on our systems. We receive and store only a Stripe customer ID and subscription status to manage your account.

2.4 Usage Data

We may collect standard usage data including pages visited, features used, timestamps, and browser/device information. This data is used to maintain and improve the Service and is not sold or shared with third parties for advertising purposes.

2.5 Communications

When you contact us via email or through the in-app support form, we collect the content of your message and your contact information in order to respond to your inquiry.

3. How We Use Your Information

Purpose	Data Used
Providing and operating the Service	Account info, performance data, usage data
Sending transactional emails (welcome, reports, trial reminders)	Email address, name, account status
Generating AI coaching reports	Scorecard data (no PHI, no personal identifiers beyond rep names entered by your team)
Processing payments and managing subscriptions	Email address, Stripe customer ID
Customer support	Account info, support communications
Improving the Service	Aggregated, anonymized usage data
Legal compliance and fraud prevention	Account info, usage logs

4. How We Share Your Information

We do not sell, rent, or trade your personal information or Customer Data to third parties. We share data only in the following limited circumstances:

4.1 Service Providers (Sub-processors)

We share data with the following third-party service providers who help us operate the Service:

Provider	Purpose	Data Shared
Supabase	Database hosting and authentication	All Customer Data (encrypted at rest)
Vercel	Application hosting and delivery	Usage/request logs
Stripe	Payment processing	Email address, billing info
Resend	Transactional email delivery	Email address, name, email content
Anthropic (Claude)	AI coaching report generation	Scorecard metrics (no PHI)
OpenAI (Whisper)	Voice transcription for roleplay sessions	Audio recordings of roleplay sessions
ElevenLabs	AI voice synthesis for roleplay personas	Text prompts (no personal data)

Each provider is contractually bound to use your data only for the purpose of providing their service to us.

4.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or government regulation, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

4.3 Business Transfers

If JLA Health Tech LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify affected customers by email or prominent in-app notice before any such transfer and before your data becomes subject to a different privacy policy.

5. Data Retention

We retain your Customer Data for as long as your account is active. After your subscription ends or your account is terminated:

• Your data remains accessible to you for any remaining paid subscription period
• After account closure, your data is retained for 90 days in case you wish to reactivate
• After the 90-day period, all Customer Data is permanently and irreversibly deleted from our systems and backups

If you wish to export your data before canceling, please contact us at admin@repscore.health.

6. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (TLS/HTTPS) and at rest
• Row-level security (RLS) policies ensuring strict data isolation between organizations
• JWT-based authentication with server-side session validation
• Access controls limiting data access to authorized users within your organization only
• No sharing of data between organizations under any circumstances

While we take data security seriously, no system is 100% secure. We cannot guarantee absolute security of your data transmitted over the internet. If you discover a security vulnerability, please report it immediately to admin@repscore.health.

7. No PHI — HIPAA Notice

RepScore Health is not a HIPAA-covered entity and is not designed to store or process Protected Health Information (PHI). Our platform tracks business development activity metrics — admissions counts, referral source contacts, territory data — not patient-level clinical or demographic information.

Do not enter patient names, patient identifiers, diagnoses, treatment details, or any other PHI into RepScore Health. If you have questions about appropriate data entry, contact admin@repscore.health.

8. Cookies and Tracking

RepScore Health uses essential cookies and browser storage to maintain your login session and application preferences. We do not use advertising cookies, cross-site tracking, or third-party analytics platforms that profile your behavior across other websites.

9. Your Rights

As a customer, you have the following rights with respect to your data:

• Access: You may request a copy of the data we hold about your account
• Correction: You may update your account information directly in the platform or by contacting us
• Deletion: You may request deletion of your account and associated data at any time
• Export: You may request an export of your Customer Data before account closure
• Portability: We will provide your data in a standard format upon request

To exercise any of these rights, contact us at admin@repscore.health. We will respond within 30 days.

10. Children's Privacy

RepScore Health is a professional B2B platform intended solely for use by adults employed in healthcare business development roles. We do not knowingly collect information from anyone under the age of 18. If we become aware that a minor has provided personal information, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email or by displaying a prominent notice in the application at least 14 days before the changes take effect. Your continued use of the Service after that date constitutes acceptance of the updated policy.

The "Last Updated" date at the top of this page indicates when the policy was most recently revised.

12. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us:

• Email: admin@repscore.health
• Company: JLA Health Tech LLC
• State of Incorporation: Florida, United States

We take privacy concerns seriously and will respond to all inquiries within 5 business days.