Privacy Policy

Last updated August 31, 2026

This page explains what Morenos Analytics (askyourdata.xyz) collects and how that information is used. It is written for clinic staff, not as a product brochure.

Who this site is for

This site is an internal money-desk for authorized staff of one small Florida clinic. It is not a consumer Medicare or ACA shopping site, and it is not the clinic's patient-facing practice website. If you were not given an account for clinic work, you should not use this site.

Account information we collect

When you create an account or sign in, we collect:

• Name (first and last, from the create-account form)
• Work email
• Phone number, if you enter one on register
• Sign-in cookies and typical connection data such as IP address, used to keep the session secure and to limit abuse

Passwords are handled by our sign-in provider. We do not store your password in clinic reports or in this policy page.

Clinic claims and roster data

The clinic uploads insurance claims and roster files (for example Devoted, Solis, and CarePlus) so staff can see spend, payments, and who is expensive. That file content is protected health information (PHI). It is used only to run this clinic's analytics — not to market to patients, not to sell lists, and not to train a public product.

Companies that help us run this site

These providers process data so the tool can run:

• Vercel — hosts the website.
• Supabase — accounts (sign-in) and the database that holds clinic analytics.
• OpenAI — used only when a typed question needs the translator. Many routine clinic questions run from templates and do not call the translator.
• Stripe — payment processing if the clinic uses paid features.
• Upstash — Redis used for rate limits when that service is configured.

PHI is hosted with the current providers listed here. A signed Business Associate Agreement is a separate contract and is not created by this page.

We do not sell personal information

We do not sell personal information or clinic PHI. We do not share it with advertisers. We share it with the providers above only as needed to operate this clinic tool, and with people the clinic authorizes.

Cookies

Cookies on this site are essential for sign-in and password reset. We do not run marketing pixels, advertising cookies, or a third-party analytics tag. There is no cookie banner because there is nothing extra to opt into.

The site also loads the DM Sans font from Google Fonts. That is a font file, not an ad tracker.

How long we keep information

Account records stay while the account is active. When an account is closed, we delete or disable sign-in access. Clinic claims and roster files stay as long as the clinic needs them to run and review this money-desk. That operational copy is the clinic's information; this page does not promise to erase payer history the clinic still uses.

To ask about your staff account, email privacy@morenosmc.com.

How to reach us

Questions about this policy: privacy@morenosmc.com.

If information is exposed

If we learn that personal information was acquired by someone who should not have it, we will notify affected people without unreasonable delay. Florida's 30-day individual notice rule is the state backdrop we work against. This is a notice commitment, not a claim that a law firm or certification program is on retainer.

Patient privacy notices

Patient rights notices come from the clinic, not from this login page. This site does not publish the clinic's Notice of Privacy Practices.