Privacy Policy

When you register for, or use, the Platform — whether under a free tier, subscription, per-seat, or pay-per-export plan — we collect:

• Account information: full name, work email address, job title, employer/company name
• Billing and payment information: processed by our third-party payment processor; we do not store full card numbers or banking credentials
• Subscription and usage data: plan type, seats provisioned, searches conducted, profiles viewed, lists created, records exported, API calls made, credits consumed
• Device and technical data: IP address, browser type and version, operating system, referring URL, session duration, clickstream data
• Communications: support tickets, feedback submissions, email correspondence with our team
• Export and integration records: what data was exported, to which CRM or tool, and by which user — maintained for compliance auditing

We compile professional profile data from the sources described in Section 4. Depending on availability, a profile may include:

• Identity and credentials: full name, professional degree(s), board certifications and year, fellowship designations, credential string (e.g., MD, FACC, FSCAI)
• Professional identifiers: National Provider Identifier (NPI), CMS Certification Number (CCN), DEA registration status (active/inactive only — not the DEA number itself)
• Practice and employment data: employer or practice name, practice address, primary specialty and subspecialty, NPPES taxonomy code, hospital admitting privileges, group practice membership, practice ownership type
• Professional contact data: practice phone, fax number, professional email — only where independently available from public government sources
• Clinical activity data: Medicare Part B patient volume, most-billed procedures by CPT family, Medicare and Medicaid participation status — sourced exclusively from CMS public use files
• Industry financial disclosure data: payments received from pharmaceutical and medical device companies — sourced exclusively from the CMS Open Payments database (Sunshine Act mandatory disclosure)
• Facility data:licensed and staffed bed count, CMS overall star rating and domain ratings, Joint Commission accreditation status, trauma center designation, teaching hospital status, Magnet nursing designation, annual discharge volume, payer mix
• Technology profile data: EHR system, practice management system, revenue cycle management, and other healthcare technology platforms — sourced through proprietary research and licensed data
• Executive career and education data: current title, organization, career history, educational credentials, professional certifications, board memberships, conference speaking history, professional association memberships

Publicly visible on profile pages: name, credentials, NPI, primary specialty, employer name and city/state, hospital affiliations, Medicare volume tier, CMS Open Payments summary, facility quality ratings.

Available to verified subscribers only: direct phone numbers, professional email addresses, technology stack details, buying intent signals, executive career network, referral patterns.

Profile Subjects may request suppression of any or all data — see Section 7.

California residents have all rights described in this Policy under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including rights to know, delete, correct, and opt out of sale or sharing. We do not discriminate against individuals who exercise their privacy rights.

We disclose that we sell or share personal information as part of our B2B platform operations. California residents may opt out at https://dmand.ai/legal/do-not-sell or by emailing [email protected] with subject line “CCPA Opt-Out Request.”

Data broker registration: We are registered or registering as a California data broker under Civil Code § 1798.99.80 et seq. with the California Privacy Protection Agency. We respond to California rights requests within 45 days (extendable to 90 days with notice).

Dmand AI is registered or registering as a data broker with the Vermont Secretary of State as required under 9 V.S.A. § 2430. Vermont residents may request that we stop selling their information by emailing [email protected].

Dmand AI is registered or registering as a data broker with the Texas Secretary of State as required under Texas Business & Commerce Code § 503.001 et seq. Texas residents have rights under the Texas Data Privacy and Security Act (TDPSA), including rights to access, correct, delete, and opt out of processing. To exercise Texas rights: email[email protected] with “Texas Privacy Request” in the subject.

Nevada residents may opt out of the sale of covered information by emailing [email protected] with the subject line “Nevada Opt-Out Request.” .

Residents of states with comprehensive privacy laws (Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Montana, Oregon, and others) have rights to access, correct, delete, port, and opt out of certain processing. We honor all applicable rights under in-effect state privacy laws.

To exercise state privacy rights: email [email protected]specifying your state of residence and the right you wish to exercise. We respond within the timeframe required by your state's law. If you are unsatisfied with our response, you may appeal by replying to our decision email within 60 days, or file a complaint with your state Attorney General.