Privacy Policy
Privacy Policy
Last Updated: March 8, 2026
This Privacy Policy describes the policies and procedures of Physician Prosperity, LLC ("Physician Prosperity," "we," "us," or "our") regarding the collection, use, and disclosure of your information when you use our website and services (collectively, the "Service"). It also explains your privacy rights and how the law protects you. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy and our Terms of Use.
Notice at Collection
The following table summarizes the categories of personal information we collect and the business purposes for which we use them. More detail on each category is provided throughout this Privacy Policy.
| Category of Personal Information | Business Purpose |
|---|---|
| Identifiers (name, email address, phone number, mailing address) | Account creation, service delivery, customer support, marketing communications |
| Commercial information (purchase history, transaction records) | Order fulfillment, refunds, accounting, tax compliance |
| Documents (uploaded employment offers, contracts, handbooks, operating agreements, term sheets, and other legal or employment-related documents) | Contract Guard MD™ analysis and report generation |
| Internet and device data (IP address, browser type, cookies, device identifiers) | Analytics, advertising, site security, service improvement |
| Usage data (pages visited, time on site, referral source) | Service improvement, analytics, advertising effectiveness |
Interpretation and Definitions
Interpretation
Words with initial capital letters have the meanings defined below. These definitions apply whether the terms appear in singular or plural form.
Definitions
Account means a unique account created for you to access our Service or parts of our Service.
Company (also referred to as "we," "us," or "our") refers to Physician Prosperity, LLC.
Cookies are small files placed on your device by a website, containing details of your browsing history and other information.
Country refers to the United States.
Device means any device that can access the Service, such as a computer, cellphone, or digital tablet.
Personal Data is any information that relates to an identified or identifiable individual.
Sale/Share (for purposes of the CCPA/CPRA) means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating a consumer's personal information to another business or third party for monetary or other valuable consideration, or for cross-context behavioral advertising purposes.
Service refers to the Website and all products and services offered by Physician Prosperity.
Service Provider means any natural or legal person who processes data on behalf of the Company.
Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
Website refers to Physician Prosperity, accessible at https://physicianprosperity.com.
You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service.
Collecting and Using Your Personal Data
Types of Data Collected
Personal Data
While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. This may include, but is not limited to:
- Email address
- First name and last name
- Phone number
- Address, state, province, ZIP/postal code, city
- Usage data
Usage Data
Usage Data is collected automatically when using the Service. It may include information such as your device's Internet Protocol (IP) address, browser type and version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.
When you access the Service through a mobile device, we may automatically collect certain information, including the type of mobile device you use, your mobile device's unique ID, your mobile device's IP address, your mobile operating system, and other diagnostic data.
Document Uploads and AI-Assisted Processing
Our Contract Guard MD™ service allows you to upload documents for AI-assisted analysis. Documents you may upload include employment offers, employment contracts, employee handbooks, operating agreements, term sheets, and other legal or employment-related documents.
How Documents Are Processed
Uploaded documents are submitted through a secure, encrypted web form on our website. Once received, documents are processed by our proprietary AI-powered contract analysis system. This processing may involve third-party workflow orchestration services and application programming interfaces (APIs) to facilitate analysis, generate reports, and deliver results to you. We use industry-standard encryption and security measures throughout this process.
Document Storage and Retention
Uploaded documents are stored on Amazon Web Services (AWS) S3 cloud storage with encryption at rest. Documents are retained for 12 months from the date of upload, after which they are permanently deleted. If we offer ongoing membership services in the future, documents associated with active memberships will be retained for the duration of the membership plus 12 months following the end of the membership.
Access and Sharing
Access to your uploaded documents is strictly limited to providing and supporting the services you purchased. We do not share, sell, publish, or distribute your uploaded documents to third parties for marketing or any purpose other than service delivery.
No Protected Health Information (PHI)
For more information on how AI is used in our services and its limitations, please see our AI Use & Accuracy Disclaimer.
Tracking Technologies and Cookies
We use cookies and similar tracking technologies to track activity on our Service and store certain information. For detailed information about the cookies we use, your choices, and how to manage your preferences, please see our Cookie Policy.
The technologies we use may include:
Cookies or Browser Cookies. A cookie is a small file placed on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some parts of our Service.
Web Beacons. Certain sections of our Service and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those pages or opened an email and for other related website statistics.
Cookies can be "Persistent" or "Session" cookies. Persistent cookies remain on your device when you go offline, while session cookies are deleted as soon as you close your browser. We use both session and persistent cookies for the following purposes:
Necessary / Essential Cookies
Type: Session Cookies. Administered by: Us. These cookies are essential to provide you with services available through the Website and to enable you to use some of its features. They help authenticate users and prevent fraudulent use of user accounts.
Cookie Policy / Notice Acceptance Cookies
Type: Persistent Cookies. Administered by: Us. These cookies identify whether users have accepted the use of cookies on the Website.
Functionality Cookies
Type: Persistent Cookies. Administered by: Us. These cookies allow us to remember choices you make, such as your login details or language preference, to provide a more personalized experience.
Tracking and Performance Cookies
Type: Persistent Cookies. Administered by: Third Parties. These cookies track information about traffic to the Website and how users interact with it. The information collected may directly or indirectly identify you as an individual visitor. We may also use these cookies to test new features and functionality.
Use of Your Personal Data
We may use your personal data for the following purposes:
- To provide and maintain our Service, including monitoring usage and delivering Contract Guard MD™ reports.
- To manage your account and provide access to Service functionalities available to registered users.
- For the performance of a contract, including the purchase of products, items, or services.
- To contact you by email, phone, or other electronic communication regarding updates, informational communications, and security updates related to your purchases or the Service.
- To provide you with news, special offers, and general information about other goods, services, and events we offer, unless you have opted not to receive such information.
- To manage your requests and attend to inquiries you make to us.
- To deliver targeted advertising, including developing and displaying content and advertising tailored to your interests and measuring its effectiveness.
- For business transfers, including evaluating or conducting a merger, divestiture, restructuring, or sale of assets.
- For other purposes, such as data analysis, identifying usage trends, evaluating promotional campaigns, and improving our Service and your experience.
We may share your personal information in the following situations:
- With Service Providers: To monitor and analyze use of our Service, process payments, deliver reports, and contact you.
- For business transfers: In connection with any merger, sale of assets, financing, or acquisition.
- With affiliates: We may share your information with our affiliates, who will honor this Privacy Policy.
- With business partners: To offer you certain products, services, or promotions.
- With your consent: We may disclose your personal information for any other purpose with your consent.
Retention of Your Personal Data
We retain your personal data only for as long as necessary for the purposes described in this Privacy Policy, to comply with legal obligations, resolve disputes, and enforce our agreements. The specific retention periods for each category of personal data are as follows:
| Category | Retention Period | Reason |
|---|---|---|
| Account and contact data (name, email, phone, address) | While account is active + 12 months after last activity | Service delivery, customer support, re-engagement |
| Uploaded documents (contracts, handbooks, etc.) | 12 months from upload date; if membership: duration of membership + 12 months | Service delivery, quality assurance |
| Purchase and transaction records | 7 years from transaction date | Tax compliance, accounting, legal obligations |
| Email marketing data | Until you unsubscribe + 30 days (suppression list maintained indefinitely to honor opt-out) | Marketing communications, CAN-SPAM compliance |
| Analytics and cookie data | Per provider defaults (e.g., Google Analytics: 14 or 26 months depending on configuration) | Site analytics, advertising effectiveness |
| Usage data (pages visited, time on site, etc.) | 24 months | Operational analysis, service improvement |
Contact information is retained unless you request its removal. After the applicable retention period, we will securely delete or anonymize your personal data, unless a longer retention is required by law.
Transfer of Your Personal Data
Your information, including personal data, is processed at our operating offices and in any other places where the parties involved in the processing are located. This means that your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those of your jurisdiction.
Your consent to this Privacy Policy, followed by your submission of such information, represents your agreement to that transfer. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.
Disclosure of Your Personal Data
Business Transactions
If we are involved in a merger, acquisition, or asset sale, your personal data may be transferred. We will provide notice before your personal data is transferred and becomes subject to a different Privacy Policy.
Law Enforcement
Under certain circumstances, we may be required to disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
Other Legal Requirements
We may disclose your personal data in the good faith belief that such action is necessary to: comply with a legal obligation; protect and defend our rights or property; prevent or investigate possible wrongdoing in connection with the Service; protect the personal safety of users of the Service or the public; or protect against legal liability.
Security of Your Personal Data
The security of your personal data is important to us. We use commercially acceptable means to protect your personal data, including encryption in transit and at rest for uploaded documents. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.
Detailed Information on the Processing of Your Personal Data
The service providers we use may have access to your personal data. These third-party vendors collect, store, use, process, and transfer information about your activity on our Service in accordance with their own privacy policies.
Analytics
We use third-party service providers to monitor and analyze the use of our Service.
Google Analytics
Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data may be shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.
You can opt out of having your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page.
Contract Analysis and Document Processing
We use the following services to process uploaded documents and deliver Contract Guard MD™ reports:
Proprietary AI-Powered Contract Analysis System
We use a proprietary AI-powered system to analyze uploaded employment documents. This system may utilize third-party artificial intelligence and machine learning services to process document content. Documents are processed solely for the purpose of generating your analysis report and are not used to train third-party AI models.
Make.com
Make.com is a workflow automation platform used to orchestrate the processing pipeline for document analysis and report generation. Their Privacy Policy can be viewed at make.com/en/privacy-notice.
Amazon Web Services (AWS)
We use Amazon Web Services, including S3 cloud storage, for secure storage of uploaded documents and generated reports. Documents are encrypted at rest. AWS's Privacy Policy can be viewed at aws.amazon.com/privacy.
Email Marketing
We may use your personal data to contact you with newsletters, marketing or promotional materials, and other information that may be of interest to you. You may opt out of receiving any or all of these communications by following the unsubscribe link in any email we send or by contacting us. For more details on our email practices, please see our Email Communication Policy.
GoHighLevel
GoHighLevel is our customer relationship management (CRM) and email marketing platform. It manages contact records, email communications, forms, and marketing automation. Their Privacy Policy can be viewed at gohighlevel.com/privacy-policy.
Payments
We may provide paid products and services within the Service. We use third-party services for payment processing and will not store or collect your payment card details. That information is provided directly to our third-party payment processors, whose use of your personal information is governed by their own privacy policies. These payment processors adhere to the standards set by PCI-DSS.
Stripe
Their Privacy Policy can be viewed at stripe.com/us/privacy.
Behavioral Remarketing
We use remarketing services to advertise to you after you have accessed or visited our Service. We and our third-party vendors use cookies and non-cookie technologies to help us recognize your device and understand how you use our Service so that we can improve our Service to reflect your interests and serve you relevant advertisements.
These third-party vendors collect, store, use, process, and transfer information about your activity on our Service in accordance with their privacy policies and to enable us to: measure and analyze traffic and browsing activity on our Service; show advertisements for our products and services to you on third-party websites or apps; and measure and analyze the performance of our advertising campaigns.
Some of these third-party vendors may use non-cookie technologies that may not be impacted by browser settings that block cookies. You can use the following third-party tools to decline the collection and use of information for interest-based advertising:
- The NAI's opt-out platform: optout.networkadvertising.org
- The DAA's opt-out platform: optout.aboutads.info
You may also opt out of all personalized advertising by enabling privacy features on your mobile device such as Limit Ad Tracking (iOS) and Opt Out of Ads Personalization (Android).
The third-party remarketing vendors we currently use include:
Google Ads (AdWords)
Google Ads remarketing service is provided by Google Inc. You can opt out of Google Analytics for Display Advertising and customize the Google Display Network ads by visiting the Google Ads Settings page. Google also recommends installing the Google Analytics Opt-out Browser Add-on. For more information, visit the Google Privacy & Terms web page.
Facebook / Meta
Facebook remarketing service is provided by Meta Platforms, Inc. You can learn more about interest-based advertising from Facebook by visiting their help center. To opt out from Facebook's interest-based ads, follow their instructions or use the DAA opt-out platform. For more information on the privacy practices of Meta, visit their Data Policy page.
Usage, Performance, and Miscellaneous
Invisible reCAPTCHA
We use an invisible captcha service named reCAPTCHA, operated by Google. The reCAPTCHA service may collect information from you and your device for security purposes. The information gathered is held in accordance with the Privacy Policy of Google.
Your Data Protection Rights Under the CCPA/CPRA
If you are a California resident, you have certain rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA/CPRA"). Physician Prosperity respects these rights and is committed to facilitating your ability to exercise them.
Your Rights
Right to Know: You have the right to request that we disclose information about what categories and specific pieces of personal information we have collected about you, the sources, the purposes, the categories of third parties with whom we share it, and whether we have sold or shared it.
Right to Delete: You have the right to request that we delete your personal information, subject to certain exceptions.
Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you.
Right to Opt Out of Sale/Sharing: You have the right to direct us not to sell or share your personal information. Because we use advertising and retargeting technologies (such as Google Ads and Facebook/Meta Pixel) that may constitute "sharing" under the CCPA/CPRA, we provide opt-out mechanisms as described below.
Right to Limit Use of Sensitive Personal Information: If we collect sensitive personal information (as defined by the CCPA/CPRA), you have the right to limit our use of that information to what is necessary for providing the services you requested.
Right to Non-Discrimination: You have the right not to be discriminated against for exercising any of your privacy rights, including by being denied goods or services, charged different prices, or provided a different quality of service.
"Do Not Sell or Share My Personal Information"
Certain advertising and analytics technologies we use may constitute "selling" or "sharing" personal information under the CCPA/CPRA. You may opt out of this activity by:
- Clicking the "Do Not Sell or Share My Personal Information" link in our website footer;
- Adjusting your preferences through our cookie consent preference center;
- Enabling a Global Privacy Control (GPC) signal in your browser;
- Contacting us at [email protected].
Global Privacy Control (GPC)
We recognize and honor Global Privacy Control (GPC) signals as a valid opt-out request for the sale or sharing of personal information under the CCPA/CPRA. If your browser sends a GPC signal, we will automatically treat it as a request to opt out of the sale or sharing of your personal information associated with that browser. For more information about GPC, visit globalprivacycontrol.org.
Exercising Your CCPA/CPRA Rights
To exercise any of your rights under the CCPA/CPRA, you can contact us by email at [email protected] or by mail at the address listed at the end of this Privacy Policy.
Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable request related to your personal information. Your request must provide sufficient information to allow us to verify your identity and describe your request with sufficient detail for us to properly respond.
We will respond to verifiable requests free of charge within 45 days of receipt. The time period may be extended once by an additional 45 days when reasonably necessary, with prior notice. Any disclosures we provide will cover the 12-month period preceding receipt of the request.
Privacy Rights Under Other State Laws
In addition to California, a growing number of U.S. states—including Colorado, Connecticut, Virginia, Texas, Oregon, Montana, and others—have enacted comprehensive privacy laws that grant their residents similar rights. If you are a resident of a state with an applicable privacy law, you may have the right to: access the personal information we hold about you; request deletion of your personal information; request correction of inaccurate personal information; and opt out of targeted advertising, the sale of personal information, and profiling in furtherance of decisions that produce legal or similarly significant effects.
To exercise any of these rights, please contact us at [email protected]. We will process your request in accordance with applicable state law. Where required by law (such as in Colorado), we honor universal opt-out mechanisms including the Global Privacy Control (GPC) signal.
Children's Privacy
Our Service does not address anyone under the age of 13, and we do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from anyone under the age of 13 without verification of parental consent, we will take steps to remove that information from our servers.
Your California Privacy Rights (California's Shine the Light Law)
Under California Civil Code Section 1798 (California's Shine the Light law), California residents with an established business relationship with us can request information once a year about sharing their personal data with third parties for the third parties' direct marketing purposes. If you are a California resident and would like to make such a request, please contact us using the information provided below.
California Privacy Rights for Minor Users
California Business and Professions Code Section 22581 allows California residents under the age of 18 who are registered users of online sites, services, or applications to request and obtain removal of content or information they have publicly posted. To request removal of such data, please contact us using the information below and include the email address associated with your account. Be aware that your request does not guarantee complete or comprehensive removal of content posted online, and the law may not permit or require removal in certain circumstances.
Do Not Track and Global Privacy Control
Some browsers offer a "Do Not Track" (DNT) setting. There is currently no industry standard for how websites should respond to DNT signals, and we do not currently respond to DNT signals.
However, as described above, we do recognize and honor Global Privacy Control (GPC) signals as a valid opt-out mechanism under applicable state privacy laws, including the CCPA/CPRA and the Colorado Privacy Act.
Links to Other Websites
Our Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Related Policies
This Privacy Policy is part of a suite of policies that govern your use of our Service. Please also review the following:
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. We may also notify you via email or a prominent notice on our Service prior to the change becoming effective. You are advised to review this Privacy Policy periodically for any changes.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or need to submit a data-related request, you can contact us:
Physician Prosperity, LLC
Email: [email protected]