Privacy notice

Updated 15 October 2026 · Applies to this development release

Information collected

Enquiry forms collect your name, work email, organization, organization type, optional plan preference and message, together with a consent version and submission timestamp. Do not include patient information, medical records or other sensitive personal information.

Purpose and storage

Details are used to record and review your request about Heartbeat. In the local preview, submissions are stored on the development machine in a disk-backed database. No confirmation email is sent, and no external CRM or analytics service is connected.

Your choices

Submitting an enquiry requires your consent. You may contact the team through the contact form to request access, correction or deletion of your enquiry details. A production privacy contact and retention schedule must be designated before public launch.

Browser storage

When identity services are configured, Heartbeat stores your verified identity reference, name, email, organization memberships, invitation records, session metadata and security activity. Essential HttpOnly cookies protect sign-in and sessions. Passwords and identity-provider tokens are not stored by Heartbeat. You can revoke Heartbeat sessions from your account; provider account recovery is handled by GLOBAL IETA.

The website stores your light or dark appearance preference in local storage. It does not use advertising cookies or load third-party tracking scripts.

Before production launch

This preview notice must be replaced with an approved notice identifying the responsible legal entity, privacy contact, retention periods, hosting locations, subprocessors and applicable rights. This release is not approved for real patient records.