Privacy Policy

• Account details: your email address, name, and the profession you select at sign-up.
• Credential records you enter: credential title, license or certificate number, issuing jurisdiction, issue and expiration dates.
• Documents you upload: photographs or PDFs of certificates and provider cards.
• Continuing education you mark as completed.
• Questions you send to the AI study tutor.

We do not collect patient information. AuraMedHub deals with professional licensure records, not medical records, and is not a HIPAA covered entity. Do not upload documents containing patient data.

Your name, email, uploaded documents and continuing education history are never returned by that lookup. Verification results come from a restricted database function that can only return those five fields.

If you create a share link from your dashboard, anyone who has that link can see your name and all your saved credentials (title, number, jurisdiction and dates), and, if you choose, your uploaded documents, until the link expires (at most 30 days) or you turn it off. You can see how many times each link was opened. Share links only with people you trust.

We use a small number of processors, and your data does not go anywhere else:

• Supabase — stores your account, credential records and uploaded documents.
• Vercel — hosts the application and processes requests.
• Resend — sends account emails (sign-up confirmation, password and email changes) and expiration reminders. Reminders include your first name, credential titles and expiration dates.
• Google (Gemini API) — when you scan a certificate or import a CE transcript, the image or PDF is sent to Google to extract the details. When you use the AI tutor, your question is sent to Google. Google processes these to return a response.

We do not sell your data, and we do not share it with advertisers or data brokers.

• Credential records are isolated per account at the database level — one user cannot read another user's records.
• Uploaded documents are kept in private storage and are reachable only through short-lived links generated for you when you open them.
• Traffic is encrypted in transit.

No system is perfectly secure, and we will not claim otherwise. If we discover a breach affecting your data, we will tell you.

• You can view and edit every credential record from your dashboard, and delete any of them at any time.
• You can change your name, profession, email address and password from the Account page.
• Expiration reminder emails are on by default. You can turn them off from the Account page.
• You can turn off any share link from your dashboard at any time.
• You can export a compliance summary as a PDF at any time.
• You can delete your account from the Account page. This immediately and permanently removes your account, credential records, continuing education history and uploaded documents. If you can't sign in, email support@auramedhub.com and we will delete it within 30 days.

We keep your data for as long as your account exists. Deleting a credential removes it and its uploaded document.

If this policy changes in a way that affects how we handle your data, we will update the date at the top and notify account holders by email before it takes effect.