Legal

Privacy Policy

Last updated: April 3, 2026 — Effective date: April 3, 2026

1. Who We Are

Med Profit IQ ("Med Profit IQ," "we," "our," or "us") is a financial intelligence platform designed specifically for medical and healthcare practices. We are operated by Doherty & Associates. Our platform connects to your practice's accounting and financial data to surface real-time analytics, cash flow projections, insurance AR tracking, payroll benchmarks, and tax estimates.

If you have questions about this Privacy Policy, contact us at jim@dohertyandassociates.com.

2. Data We Collect

We collect only what is necessary to provide Med Profit IQ's services.

Account & Contact Data

Financial & Practice Data

Usage & Analytics Data

3. How We Use Your Data

We use collected data to:

We do not sell your data to third parties. We do not use your financial data for advertising or marketing targeting beyond aggregate, de-identified analytics.

4. Data Storage & Security

We take the security of your financial data seriously.

Encryption at rest and in transit: All OAuth tokens and sensitive credentials are encrypted using AES-256-GCM before database storage. All data in transit is protected by TLS 1.2+.

5. Third-Party Services

Med Profit IQ integrates with and relies on third-party services. Each operates under its own privacy policy.

QuickBooks Online (Intuit) — We use the QuickBooks Online API to read authorized accounting data. You control what data Med Profit IQ can access via the QBO OAuth authorization flow. Med Profit IQ only requests read-only scopes necessary to provide the service. Intuit's privacy policy governs their handling of data: intuit.com/privacy.

Meta Pixel — We use Meta's advertising pixel to measure the effectiveness of our marketing (page views, lead events). Meta may use this data for ad targeting on their platforms. You can opt out via Meta Privacy Settings.

Payment Processing — Billing and subscription payments are handled by Stripe. We do not store full credit card details. Stripe's privacy policy applies: stripe.com/privacy.

Email Delivery — Transactional emails (signup notifications, alerts) are delivered via Postmark. Recipient email addresses are transmitted to Postmark solely for delivery purposes.

6. HIPAA Business Associate Considerations

Med Profit IQ processes financial and billing data from medical practices, not Protected Health Information (PHI) as defined under HIPAA. Typical data includes revenue totals, expense categories, payroll figures, insurance AR bucket amounts, and anonymized encounter-level billing metrics.

If your use of Med Profit IQ involves the processing of PHI in connection with healthcare operations, you may be required to execute a Business Associate Agreement (BAA) with us before transmitting such data. Contact jim@dohertyandassociates.com to discuss BAA requirements.

We recommend practices review what data is accessible to Med Profit IQ via QuickBooks Online and ensure that only financial records—not clinical records—are authorized.

7. Data Retention & Deletion

We retain your data for as long as your account is active or as needed to provide services. Specifically:

To request deletion of your data, email jim@dohertyandassociates.com with subject "Data Deletion Request." We will process your request within 30 days and confirm when deletion is complete.

8. Your Rights

Depending on your location, you may have rights regarding your personal data, including:

To exercise any of these rights, contact jim@dohertyandassociates.com.

9. Cookies & Tracking

Med Profit IQ uses browser local storage (not cookies) to maintain session state and visitor analytics identifiers. We do not use persistent tracking cookies for advertising.

The Meta Pixel uses cookies controlled by Meta. You can manage these through your browser settings or Meta's privacy controls.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes to our practices or legal requirements. When we do, we will update the "Last updated" date at the top. For material changes, we will notify active subscribers via email at least 14 days before the change takes effect.

11. Contact Us

Questions, concerns, or requests related to this Privacy Policy:

Doherty & Associates / Med Profit IQ
Email: jim@dohertyandassociates.com