Data Handling & Deletion

01What data we handle

• Inquiry data — name, work email, organization, and message when you contact us.
• Account data — for paid Services: business contact details, credentials, and configuration.
• Usage data — logs and, where enabled, analytics about how the site and Services are used.
• Connected-platform data — for facilities that connect an account (e.g., a Facebook Page, Google Business Profile, or EMR), the specific data needed to deliver the requested service, such as content the facility approves for publishing and the facility's own engagement and profile metrics.

We aim to collect the minimum needed and do not seek protected health information through the website. PHI is handled only within Services covered by a signed Business Associate Agreement.

02Where it lives & how it's protected

Data is stored with reputable cloud infrastructure providers [e.g., AWS] in the United States. We protect it with encryption in transit, access controls, least-privilege credential handling, and secrets management. Access is limited to personnel and sub-processors who need it to operate the Services.

03How long we keep it

• Inquiry messages — up to [24 months], then deleted or de-identified.
• Account data — for the life of the account, then deleted or de-identified within [30 days] of account closure, except where longer retention is legally required (e.g., billing records).
• Connected-platform data — retained only while the connection is active and the service requires it; removed when disconnected as described in Section 5.
• Backups — residual copies in encrypted backups are purged on our normal backup rotation, generally within [90 days].

04How to request access or deletion

You can ask us to provide a copy of, or delete, the personal data we hold about you:

• Email privacy@bhgrowthengine.ai with the subject "Data request," or
• Use the contact form and select "Data access or deletion request."

Tell us what you'd like (access or deletion) and the email or account involved so we can locate the data. We will:

• Acknowledge your request within 5 business days;
• Verify your identity or authority to make the request;
• Complete a verified deletion within 30 days (we'll tell you if more time is needed); and
• Retain only what the law requires us to keep, which we will identify.

There is no charge for a reasonable request, and we won't penalize you for making one.

05Deleting connected-platform data (Facebook / Google)

Facebook / Meta

If a facility connected a Facebook or Instagram account to our Services and wants the associated data removed:

• Disconnect the app in Facebook under Settings & Privacy → Settings → Business Integrations (or Apps and Websites), and remove BH Growth Engine. This immediately revokes our future access.
• Request deletion of any data already stored by emailing privacy@bhgrowthengine.ai or using the contact form (choose "Data access or deletion request"). We will delete the connected-account data we hold within 30 days and confirm when it's done.

Google

To disconnect a Google Business Profile or other Google account, remove BH Growth Engine's access in your Google Account under Security → Your connections to third-party apps & services, and request deletion of stored data using the same contact methods above.

Data we receive from these platforms is used only to provide the facility its service, is never sold, and is deleted on disconnection or on request as described here.

06Facility offboarding

When a customer facility ends its use of a Service, we delete or de-identify that facility's data within [30 days], except for records we must retain by law and residual encrypted backups purged on our normal rotation. On request, we can provide an export of the facility's data before deletion. Where a BAA applies, offboarding and PHI return/destruction follow that agreement.

07Questions

Privacy and data requests: privacy@bhgrowthengine.ai

General contact: bhgrowthengine.ai/contact  ·  See also our Privacy Policy.