Where it lives
Hosted with Cloudflare
Customer data is held with our hosting provider. Every subprocessor is listed on the privacy page, & we update that list before a new one handles customer data.
Security & data
What we read, & where it lives.
A plain statement of what Foreman reads from your tools, where it is stored & how access is sealed.
What we read
Only what the money view needs.
A plain statement, so you can check it against what you grant.
- Customers: name, phone, email & visit history.
- Appointments, jobs & quotes, & their status.
- Invoices & paid status.
- Ad spend & which campaign a lead came from.
- Hours worked, when you connect payroll or give us a wage table.
Which of these a given tool covers is confirmed before you sign. Nothing is connected until you grant access.
What we do not read
Out of scope.
- Card numbers. Payments stay with your payment provider.
- The passwords to your tools. Access is granted through the tool, not shared with us.
- Clinical records. Treatment notes, charts & diagnoses are out of scope until we say otherwise on this page. Regulated practices get appointment-only messaging.
How it is held
Where it lives, & how access works.
Credentials
Sealed & scoped
Credentials for connected tools are stored encrypted & scoped to the minimum access needed. Access to customer data is limited to the people who need it.
Access
Read-only by default
Foreman reads. Writing a booking back to a tool happens only where you allow it, & each tool lists what it covers.
Leaving
Disconnect any time
Revoke access at the tool whenever you like. When the account ends your data is deleted after 30 days, unless the law requires longer.
Claims
What we do not claim.
What we do not claim
We do not claim HIPAA compliance or SOC 2 certification, & we hold no security certification. We are not a HIPAA covered entity or business associate & do not accept protected health information. No system is perfectly secure. If a breach affects your data we will tell you without undue delay.
Questions about any of this: [email protected].