Legal
Privacy Policy
Effective 20 September 2026
Credentix Health (“we”, “us”) provides credentialing software for clinics, medical groups, health systems, and credentialing agencies. This policy describes how we handle information on credentixhealth.com and in the product.
We collect professional and account information used to run credentialing operations. We do not collect patient medical records.
Information we collect
- Inquiries. When you request a demo or more information: name, work email, phone, organization, role, provider or clinic counts, optional NPI or tax ID, and whatever you type in the form.
- Accounts. Email, name, hashed password, role, organization membership, and sign-in activity (including IP address).
- Provider records. Professional details you or your organization enter or upload: licenses, certifications, education, work history, NPI, payer enrollments, and supporting documents.
- Billing. If you subscribe, payment is processed by Stripe. We store subscription status, not full card numbers.
- Technical logs. Browser type, timestamps, and security events needed to operate and protect the service.
How we use it
We use this information to:
- respond to sales and support requests
- create and secure accounts, and run credentialing workflows for your organization
- send operational email (invites, password reset, reminders) through our email provider
- process subscriptions
- keep the service secure and meet our legal obligations
We do not sell your information.
Who can see it
- People in your organization (or agency) who are granted access in Credentix Health.
- Service providers that host the application, store documents, send email, process payments, or help us operate the platform. They may only use information as needed to provide that service to us. A current list of those providers is available to customers on request.
- Authorities if required by law.
Inquiry emails are sent to our sales inbox. Do not include information you would not want delivered by email.
Cookies and sign-in
We use essential cookies (or equivalent session storage) to keep you signed in and to protect accounts. We do not use advertising cookies.
Retention
We keep account and provider records while your organization uses the service, and for a limited period afterward as needed for security, billing, or legal requirements. You may ask your organization administrator to correct or delete records they control.
Security
Access is role-based, traffic is encrypted in transit, and documents are stored in a restricted object store. No method of transmission is perfectly secure.
Children
The service is for healthcare organizations and licensed professionals, not for children.
Changes
We will update this page if our practices change. The effective date above is the latest version.
Contact
Questions: [email protected], or use the request form on our website. See also our Terms of Use.