Privacy Policy

1. Introduction

Rehab Vista ("we", "our", or "us") operates the platform accessible at rehabvista.org and associated services. This Privacy Policy describes how we collect, use, share, and protect personal information when you use our services. By using Rehab Vista, you agree to the practices described in this policy.

2. Information We Collect

2.1 Personal Information

We collect information you provide directly: name, email address, phone number, organization name, job title, and any other data you submit through contact forms, account registration, or support requests.

2.2 Automatically Collected Data

When you use our platform, we automatically collect usage data including IP address, browser type, pages visited, session timestamps, and device identifiers. This data is used to maintain security, diagnose issues, and improve the platform.

2.3 Social Media and Integration Data

If your organization connects third-party services (such as communication platforms), we may receive data from those integrations only as necessary to deliver the connected features. We do not access data beyond what the integration explicitly requires.

3. How We Use Your Information

We use collected information to: provide and maintain the Rehab Vista platform; authenticate users and enforce access control; send operational notifications and support communications; analyze usage patterns to improve features; comply with legal obligations; and respond to your inquiries.

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

4. How We Share Your Information

4.1 Service Providers

We share data with trusted service providers who assist us in operating the platform — including cloud infrastructure, email delivery, and analytics providers. These providers are contractually bound to handle your data only as instructed.

4.2 Social Platforms and Integrations

Data shared with connected integrations is limited to what is required for that feature to function. We do not share your data with these platforms for their own purposes.

4.3 Legal Requirements

We may disclose information when required by law, court order, or government authority, or when we believe disclosure is necessary to protect our rights or prevent harm.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will provide notice before your personal information becomes subject to a different privacy policy.

5. Data Security

We implement encryption at rest and in transit, role-based access controls, structured access reviews, and immutable audit logs. Despite these measures, no system is completely secure. We encourage you to use strong passwords and report any suspected security issues immediately.

6. Data Retention

We retain personal data for as long as your account is active or as needed to provide services. Upon account termination, we delete or anonymize personal data within 90 days unless a longer retention period is required by law or contractual obligation.

7. Your Privacy Rights

Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; object to or restrict certain processing; and receive your data in a portable format. To exercise any of these rights, contact us at contact@rehabvista.com.

8. Cookies & Tracking

We use session cookies for authentication and functional cookies to remember your preferences. We do not use third-party advertising cookies. You can disable cookies in your browser settings, but doing so may affect the functionality of the platform.

9. International Data Transfers

Your data may be processed in countries other than your own. Where transfers occur, we ensure appropriate safeguards are in place — including standard contractual clauses or equivalent mechanisms — to maintain the protections described in this policy.

10. Children's Privacy

Rehab Vista is not directed at children under 13. We do not knowingly collect personal information from children under 13. Student records managed through our platform belong to the organization operating the service and are governed by that organization's data policies.

11. GDPR (EU)

If you are in the European Economic Area, we process your personal data on lawful bases including contract performance, legitimate interests, and your consent where required. You have the rights described in Article 15–22 of the GDPR. To submit a data subject request, email contact@rehabvista.com.

12. CCPA (California)

California residents have the right to know what personal information we collect, to request deletion, to opt out of the sale of personal information (we do not sell personal data), and to non-discrimination for exercising these rights. To submit a CCPA request, email contact@rehabvista.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, for material changes, notify users via email or a notice on the platform. Continued use of the service after changes constitutes acceptance of the revised policy.

14. Contact Us

For privacy questions, data requests, or to contact our privacy team: