Privacy Policy

Last updated: April 2026

1. Introduction

Alliance Therapy Services ("we," "our," or "us") is committed to protecting the privacy of our employees, contractors, and training platform users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Alliance Therapy Services Compliance Training Platform (the "Platform").

2. Information We Collect

2.1 Personal Information

When you register for and use the Platform, we collect:

  • Account Information: Full name, email address, and encrypted password.
  • Training Records: Module completion dates, quiz scores, quiz attempt history, time spent on quizzes, and certificate serial numbers.
  • Gamification Data: Points, badges earned, streak counts, and leaderboard rankings.
  • Social Interactions: Kudos messages sent and received, activity feed posts.

2.2 Automatically Collected Information

We automatically collect certain information when you access the Platform:

  • Usage Data: Pages visited, features used, and interaction patterns.
  • Device Information: IP address, browser type, and user agent string.
  • Audit Logs: Login/logout timestamps, actions performed, and IP addresses for security and compliance purposes.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the training platform.
  • Track and report on compliance training completion as required by healthcare regulations.
  • Generate certificates of completion for your training records.
  • Send transactional emails (welcome emails, password resets, completion notifications).
  • Maintain audit trails for regulatory compliance.
  • Facilitate the gamification system (points, badges, leaderboards).
  • Enable social features (people directory, kudos, activity feed).
  • Detect and prevent unauthorized access or misuse of the Platform.

4. Information Sharing

We do not sell or rent your personal information. We may share your information in the following circumstances:

  • Within the Organization: Managers and administrators can view your training completion status, quiz scores, and compliance records as part of their supervisory duties.
  • Social Features: Your name, badges, completion status, and points are visible to other Platform users through the people directory, leaderboard, and activity feed.
  • Certificate Verification: Certificate serial numbers can be verified through the public verification endpoint, which displays your name, module completed, and completion date.
  • Legal Requirements: We may disclose your information if required by law, regulation, or legal process.
  • Service Providers: We may share information with third-party providers who assist in operating the Platform (hosting, email delivery), subject to confidentiality agreements.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Password hashing using industry-standard algorithms (Werkzeug/bcrypt).
  • CSRF protection on all form submissions.
  • Rate limiting to prevent brute-force attacks.
  • Secure session management with HttpOnly and SameSite cookie flags.
  • Content Security Policy headers to prevent XSS attacks.
  • HTTPS encryption for all data in transit.
  • Database encryption at rest (provided by our hosting provider).

6. Data Retention

We retain your training records and compliance data for the duration of your employment and for a minimum of seven (7) years after separation, as required by healthcare compliance regulations. Audit logs are retained for a minimum of six (6) years. You may request deletion of your account by contacting your administrator, subject to regulatory retention requirements.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your information (subject to retention requirements).
  • Update your profile information through the Platform.
  • Change your password at any time.

8. HIPAA Considerations

While this Platform does not store Protected Health Information (PHI), we treat all employee data with the same care and diligence expected in a healthcare environment. Our security practices align with HIPAA security standards where applicable.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on the Platform and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact:

Alliance Therapy Services
Compliance Department
Email: [email protected]
Phone: (409) 299-4638