Privacy Policy — Bio-Logic for Practitioners

Last Updated: July 14, 2026

Resonant Consulting, LLC ("Company," "we," "us," or "our") respects your privacy and the privacy of the people you serve. This Privacy Policy explains how we collect, use, share, and protect information when you use Bio-Logic for Practitioners (the "Service").

By using the Service, you acknowledge the practices described in this Policy. If you do not agree, do not use the Service.

1. Two Categories of Information — A Critical Distinction

Because the Service is a professional tool, the information involved falls into two very different categories:

Category A — Practitioner Account Information. Information about you, the Practitioner, as the user of the Service. You are the data subject for this information.

Category B — Conversation Content About Your Clients. Information you input describing the people you work with. You are required by our Terms of Service to de-identify this content before submitting it. Our handling of Category B is built on the assumption that you have done so.

This distinction governs how we apply this Policy. Where the law and your obligations create different roles — for example, where you are the "controller" of client information and we are a "service provider" or "processor" — your client-related notice and consent obligations to your clients remain your responsibility, not ours.

2. Information We Collect

2.1 Information You Provide (Category A — about you)

  • Account Information. Name, email address, password, professional description, and any optional profile information you provide.
  • Communications. Information you provide when contacting support, providing feedback, or completing surveys.
  • Payment Information (if applicable). If you purchase a paid plan, payments are processed by our third-party payment processor, Stripe, Inc.; we do not store full payment card details.

2.2 Conversation Content (Category B — about your clients, in de-identified form)

  • De-identified Descriptions, Reflections, and Inputs you submit while using the Service. Under our Terms, this content must not identify any specific individual.

2.3 Information Collected Automatically (Category A)

  • Account Usage Metrics. Activity associated with your account — such as the number of messages you send, your subscription status, and how your usage changes over time — used to operate the Service, understand engagement, manage capacity, and estimate our operating costs.
  • First-Party Website Analytics. When you visit our public website, we collect privacy-preserving, aggregate traffic data — the page visited, the site that referred you, and any campaign tags in the link you followed. This analytics is cookieless and processed on our own systems. We do not store your IP address or browser user-agent for analytics; instead we derive a one-way token that rotates daily and cannot be used to identify you or to track you across days or across other websites. We do not use third-party advertising or tracking networks.
  • Server Logs. Like virtually all online services, our servers briefly process technical data such as your IP address to route, deliver, and secure requests. We do not use this information for advertising or profiling.

2.4 Information from Third Parties

We do not buy personal information from data brokers, and we do not use third-party login or social-authentication providers. The only third party that supplies us information is our payment processor, Stripe, Inc., which — if you purchase a paid plan — shares limited transaction details so we can service your subscription. We never receive or store your full payment card number.

3. Your Obligations Regarding Your Clients

You are responsible for:

  • Properly de-identifying all client-related content before inputting it, as required by our Terms;
  • Obtaining whatever consents your professional, ethical, or legal obligations require from your clients regarding your use of AI tools to support your work;
  • Providing your own privacy notice to your clients about your use of third-party tools as part of your practice;
  • Honoring any client requests directed to you concerning data they believe you have shared with us.

We are not in a direct relationship with your clients and do not undertake any obligation to them through this Policy.

4. How We Use Information

We use information to:

  • Provide, maintain, and operate the Service;
  • Generate AI responses to your inputs;
  • Communicate with you about the Service, including updates, security notices, and support;
  • Improve the Service through analysis of aggregated, anonymized usage metrics (NOT through use of conversation content — see Section 5);
  • Monitor and analyze usage and trends, and estimate and manage our operating costs and capacity;
  • Detect, prevent, and address fraud, abuse, security issues, and violations of our Terms, including violations of the de-identification requirement;
  • Comply with legal obligations and enforce our agreements.

5. AI Model Training — We Do NOT Train on Your Content

We do NOT use any conversation content you input — whether Category A or Category B — to train, fine-tune, or otherwise improve AI models. This applies regardless of how the content is framed.

We may use aggregated, anonymized usage metrics (e.g., session counts, feature engagement, error rates) to improve the Service. Such metrics do not include the substance of your conversations.

No opt-in toggle is provided for AI training, because you are not in a position to authorize training on content that may concern your clients.

6. How We Share Information

We do NOT sell your personal information. We share information only as described below:

  • Service Providers. Hosting and cloud infrastructure (Render), the AI model provider (Anthropic), and our payment processor (Stripe) perform services on our behalf under contractual confidentiality and data-protection obligations. We do not use third-party analytics or advertising providers.
  • AI Model Providers. Your conversation inputs are processed by Anthropic to generate responses. Anthropic processes inputs under its applicable terms; we do not authorize Anthropic to use your inputs for its own model training where opt-out is available. You acknowledge that even de-identified content you input passes through Anthropic's infrastructure for the purpose of generating responses.
  • Legal and Safety. When required by law, legal process, or to protect the rights, property, or safety of the Company, users, or others.
  • Business Transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, with appropriate confidentiality protections.
  • With Your Consent. Any other sharing with your direction or consent.

7. Data Retention

We retain account information and conversation content indefinitely, subject to your right to request deletion at any time as described in Section 9. You may also delete specific conversations from within the Service at any time. We may retain certain information longer than otherwise required to comply with legal obligations, resolve disputes, or enforce our agreements.

8. Cookies and Tracking Technologies

We use a single first-party cookie to keep you securely signed in. We do not use advertising cookies, cross-site trackers, or third-party analytics cookies, and our website analytics (Section 2.3) is cookieless. You can control cookies through your browser settings, but disabling the sign-in cookie will prevent you from logging in. Because we do not track you across other websites, there is nothing for a Do Not Track signal to change — we avoid cross-site tracking in the first place.

9. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect information, including encryption in transit (TLS); encryption of stored data at rest at the disk and backup level, provided by our hosting infrastructure; access controls that limit who can access data; and monitoring. Data is not individually encrypted within our database, which means authorized personnel and our service providers can access it as needed to operate and support the Service. No system is perfectly secure, and we cannot guarantee absolute security. The Service is not configured for, and you must not use it to handle, Protected Health Information (PHI) under HIPAA.

10. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you;
  • Correct inaccurate information;
  • Delete your personal information;
  • Restrict or object to certain processing;
  • Receive your information in a portable format;
  • Withdraw consent;
  • Lodge a complaint with a data protection authority.

To exercise these rights as a Practitioner, contact us at resonantconsulting@protonmail.com.

Requests From Your Clients. If a person who believes they have been described in your account contacts us directly with a rights request, we will generally direct them to you, as the party who controls what was input and who has the direct relationship with them. You agree to respond to such situations in good faith.

California Residents. Under the CCPA/CPRA, you have additional rights including the right to know specific pieces of information collected and the right to non-discrimination for exercising your rights.

EU/UK/EEA Residents. Our lawful bases include consent, contract performance, legitimate interests, and legal obligations. Where we transfer data outside your region, we use Standard Contractual Clauses or other appropriate safeguards.

11. No Use by Minors

The Service is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. The Service must not be used to discuss minors, even in de-identified form, except in the limited context where a Practitioner's professional practice serves families and the de-identified content concerns generalized patterns rather than specific minors.

12. International Transfers

The Service is operated from the United States. If you are located outside the U.S., your information will be transferred to and processed in the U.S. and other countries, which may have different data protection laws. By using the Service, you consent to such transfers.

13. Third-Party Services

The Service may contain links to third-party sites or integrate with third-party services. We are not responsible for their privacy practices. Review their privacy policies before providing information.

14. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated by posting the updated Policy with a new "Last Updated" date or by other reasonable means. Your continued use after changes constitutes acceptance.

15. Contact Us

For privacy questions or to exercise your rights:

Resonant Consulting, LLC
Attn: Privacy
6545 Market Ave. North, STE 100, Canton, OH 44721, USA
resonantconsulting@protonmail.com