Privacy Policy

Who is responsible

The Multistate NP is operated by Ingram Solutions, LLC, a Michigan limited liability company. For any privacy question or request, email hello@themultistatenp.com.

Information you give us

• Account. Your email address and either a password or Google sign-in. With Google sign-in we receive your basic profile and email address, not access to Gmail, Drive, contacts or calendar.
• My Workspace. License, certification, continuing-education, enrollment and insurance details you choose to save, your notes, and documents you upload with the text read from them.
• Email reminders. If you turn them on: the recipient address, time zone, preferred send time and which reminders you want.
• Contact form. Your name, email address, reason, message and the page you wrote from. Emails you send us directly are kept the same way.
• “Notify me” requests on book pages. Your email address and the book. We keep the request in our contact inbox and add your address to that book’s release mailing list, which we use to tell you when ordering opens and about that book’s publication. It is not a purchase. Every list email includes an unsubscribe link, and you can also ask us to remove you.
• Documentation Library. Whether your account has access, and the templates you request. Do not enter patient information in its search field.

Information collected automatically

Our hosting and sign-in providers process IP address, browser and device details, request metadata, security events and session identifiers to deliver and protect the site. To limit repeated contact-form submissions, we store a daily one-way hash of the IP address and email address rather than the raw IP address.

The site uses necessary sign-in cookies and one interface-preference cookie, described in the Cookie Policy.

Our host adds Cloudflare Web Analytics, a script that measures page views and page-load performance so we can see traffic and speed in aggregate. Cloudflare states that it does not collect visitors’ personal data or track individuals across websites, and it sets no cookies on our site. The site does not use advertising pixels, retargeting, session-replay tools or other analytics services, and it does not load Stripe scripts on its own pages; Stripe’s technologies run on Stripe’s checkout page.

Information kept only in your browser

The New license planner, Transition to practice, the Offer & pay analyzer and the Clinical placement planner can keep an unsaved draft in your browser tab’s session storage so a refresh does not lose your work. That draft is not sent to us unless you are signed in and choose to save it to your account, where it is kept with your other records until you delete it. The draft is cleared when you close the tab. The book announcement also uses session storage to remember that you closed it during your visit.

How we use information

To run your account and the features you use; send the reminders you turn on; read documents you ask us to read; answer inquiries and correction reports; process and fulfill orders, email you order confirmations, shipping and tracking updates, delay notices and refund notices, handle returns and keep tax records; tell you when ordering opens if you asked; fix errors; and keep the service secure. We do not ask for patient records or protected health information, and we do not sell personal information or use it for targeted advertising.

Service providers

• Cloudflare hosts the site and stores the database and uploaded files.
• Supabase provides sign-in and account email verification. Google processes your identity if you choose Google sign-in.
• Resend holds book release mailing lists, delivers contact-form notifications to our inbox, the reminder emails you turn on, and the emails about your orders (confirmation, shipping and tracking, delay and refund notices).
• Stripe processes payments, screens them for fraud, calculates sales tax and collects billing and shipping details on its hosted checkout page.
• OpenAI receives a document only if you choose AI reading for that specific document: an unchecked option on the upload screen, or “Read with AI” in Documents. Otherwise documents are read with text recognition in your browser. When you choose AI reading, the file is sent within a single request to OpenAI’s API; it is not added to OpenAI file storage, and the request asks OpenAI not to store the response. OpenAI states that it may keep API request data for up to 30 days for abuse monitoring. We do not claim zero data retention.

Who can see your information

Your workspace is private to your account; other users cannot see it. The site owner and our service providers can access information only as needed to provide support, operate and secure the service, or comply with the law. We may disclose information when legally required or to protect the rights and safety of users or the public.

Purchases and payments

Orders are paid on a checkout page hosted by Stripe, our payment processor. When you check out, Stripe collects and processes, as it needs to complete and protect the payment: your name, email address, billing and shipping addresses, payment-method details, transaction details, sales-tax information, and device and technical information used to detect fraud. Stripe handles this under its own privacy policy. Depending on the options Stripe shows you, you may be able to pay with a wallet such as Apple Pay or Google Pay or with Stripe’s Link, which are subject to their providers’ terms. If you choose to save your details with Link, Stripe asks for your mobile phone number for Link; that number is held by Stripe under Link’s terms and is not part of the order details we receive.

Your full card number is entered directly into Stripe’s payment page. Ingram Solutions, LLC does not receive or store complete payment-card numbers.

We do receive limited information from Stripe to fulfill and support your order and to keep business and tax records: your name, email address, shipping address, the items and quantity, the shipping method, the amounts charged (price, shipping, tax and total), the payment status, and Stripe’s session and payment identifiers. Through our Stripe account we can also see related details such as the payment-method type, card brand and last four digits, and billing address. We also keep the date and time you accepted the purchase terms and which policy version you accepted, and, if you were signed in, your account ID. If you enter a business name at checkout, we receive it too. Order emails are transactional and do not sign you up for marketing email.

How long we keep information

• Account and workspace records: while your account is open, or until you delete them or ask us to.
• Uploaded documents: until you delete them in Documents, which removes the stored file and the text read from it. Tracker records created from a document are kept until you delete them separately.
• Order records, including the purchase-terms acceptance: as long as needed for fulfillment, returns, warranty and dispute handling, and tax and accounting obligations.
• Contact inquiries: while needed for follow-up. Once resolved, a general inquiry is given a proposed deletion date about 24 months later, which the owner reviews before deleting. Order-related records and records under a legal hold are kept as long as required.
• Backups and security logs kept by our providers can persist for a limited time after deletion.

Your choices and requests

You can edit or delete workspace records and uploaded documents yourself, export them from your account page, and turn reminders off or unsubscribe from any reminder email. To request access, correction, export or deletion of your information, or deletion of your account, email hello@themultistatenp.com. We may need to confirm that the request comes from you.

Depending on where you live, you may have additional privacy rights. Contact us and we will respond as applicable law requires.

Security

We use sign-in controls, per-account access checks and private file storage. No internet service is completely secure, so do not upload patient-identifiable information, passwords or API keys.

Children

This is a professional resource for clinicians and students. It is not directed to children under 13, and we do not knowingly collect their information.

Changes to this policy

We will post changes on this page with a new date, and update it before adding any new kind of analytics, tracking or data use.