Privacy Policy

When you submit our contact form, we collect your name, email address, company name, industry, and any message you provide. This information is used solely to respond to your inquiry.

When you create an account or use our platform, we collect information necessary to provide the service — including your organization name, email address, and usage data such as which features you access and when.

We do not collect sensitive personal health information (PHI) about your patients or clients. Focul is a compliance management tool, not a clinical system.

Contact form submissions are used to respond to your inquiry and, if you become a customer, to onboard your organization. We do not sell or share your contact information with third parties for marketing purposes.

Account and usage data is used to operate and improve the platform, provide customer support, send product-related communications (such as security notices or feature updates), and fulfill our contractual obligations to you.

Your data is stored on infrastructure provided by Supabase, a SOC 2 Type II certified platform. Data is encrypted at rest and in transit.

We implement administrative, technical, and physical safeguards designed to protect your information from unauthorized access, disclosure, or destruction. However, no system is completely secure, and we cannot guarantee absolute security.

If your organization is a Covered Entity or Business Associate under HIPAA, and you use Focul to manage HIPAA compliance workflows, we are prepared to enter into a Business Associate Agreement (BAA) with you. Please contact us at austin@focalcompliance.com to request a BAA.

We use cookies and similar technologies to maintain your session when you're logged in. We do not use third-party advertising cookies or sell your browsing data.

We may use basic analytics (such as page view counts) to understand how visitors use our site. This data is aggregated and not linked to individual identities.

We use the following third-party providers to operate our service: Supabase (database and authentication), Stripe (payment processing), and Resend (transactional email). Each provider has their own privacy policy and data processing terms.

We do not share your personal data with any third party beyond what is necessary to operate the service.

We retain your information for as long as your account is active or as needed to provide you with service. If you cancel your account, you may request deletion of your data by contacting us. We may retain certain information as required by law or for legitimate business purposes such as resolving disputes.

You have the right to access, correct, or request deletion of the personal information we hold about you. To exercise these rights, contact us at austin@focalcompliance.com. We will respond to your request within 30 days.

If you are located in the European Economic Area (EEA), you may also have additional rights under GDPR, including the right to data portability and the right to lodge a complaint with your local supervisory authority.

We may update this Privacy Policy from time to time. When we do, we will revise the date at the top of this page and, for material changes, notify account holders by email. Continued use of the platform after changes constitutes your acceptance of the updated policy.

If you have questions about this Privacy Policy or how we handle your data, contact us at austin@focalcompliance.com or through the contact form on this site.