Privacy Policy

Tack Health (“Tack,” “we,” “our”) is operated by Caris Labs. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Tack Health platform at tack.health.

Information We Collect

Account information: When you create an account, we collect your name, email address, and organization details. We use this to provide and personalize the service.

Usage data: We collect information about how you interact with Tack, including pages visited, features used, and session duration. This helps us improve the product.

Payment information: Billing is processed through Stripe. We do not store credit card numbers on our servers. Stripe collects and processes payment information in accordance with their own privacy policy.

CMS Public Data

Tack Health aggregates and displays data from the Centers for Medicare & Medicaid Services (CMS) Provider Data APIs. This data is publicly available and includes facility ratings, staffing metrics, quality measures, deficiency citations, and penalty information. We do not collect protected health information (PHI) or personally identifiable resident data.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Tack Health platform
• Process transactions and send billing notifications
• Send transactional emails (welcome, trial reminders, billing updates)
• Respond to customer support requests
• Analyze usage patterns to improve product features and performance

Third-Party Services

We use the following third-party services to operate Tack Health:

• Supabase — Database hosting and authentication
• Stripe — Payment processing and subscription management
• Resend — Transactional email delivery
• Vercel — Application hosting and deployment

Each of these services has their own privacy policy governing how they handle data.

Cookies

Tack Health uses essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

Data Retention

We retain your account information for as long as your account is active. If you close your account, we will delete your personal information within 30 days, except where retention is required by law. Aggregated, anonymized usage data may be retained indefinitely for product improvement.

Data Security

We implement reasonable security measures to protect your information, including encrypted data transmission (TLS), encrypted data at rest, and role-based access controls. However, no method of transmission over the Internet is 100% secure.

Your Rights

You may request access to, correction of, or deletion of your personal information at any time by contacting us at hello@tack.health. We will respond to your request within 30 days.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or by posting a notice on the platform. Your continued use of Tack Health after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, please contact us at hello@tack.health.