How we handle information.

1. The plain-English summary

Sculptrix is a Practice Intelligence Layer for aesthetic practices. To do that work, we collect a small amount of information about the practices we engage with, the people who request a Patient Retention Scorecard, and the operational metadata required to run the layer itself.

We do not collect, store, or process patient health information. That stays inside your practice management system. Pattern 2 architecture is designed exactly so we never have to.

If you've requested an audit, signed up for our newsletter, or visited our website, this page tells you what we do with the information we have about you and your practice — and what you can ask us to do about it.

2. What we collect

From practices that engage with us

• Practice name, location, decision-maker name, business email, business phone
• Practice management system in use, approximate location count
• Operational metadata once a contract begins (anonymized event triggers, timing data, integration logs)

From visitors to sculptrix.ai

• Standard web analytics (page views, referrer, approximate location, device type) via Google Analytics 4
• Audience-building data via the Meta Pixel and LinkedIn Insight Tag, used for retargeting only
• Voluntary form submissions (audit requests, newsletter signups, contact-us messages)

From outbound prospects

• Publicly available business information enriched via Apollo (name, title, business email, company)
• Email engagement data (open, click) when our outbound system delivers a message and you interact with it

3. What we don't collect

We do not collect, store, or process patient health information of any kind. Patient names, contact details, treatment notes, photographs, billing records — all of it stays inside your practice management system, governed by HIPAA, behind your existing access controls.

We do not sell, rent, or trade information to data brokers. We do not enrich our outbound lists from sources that violate the publishing platforms' terms.

We do not record audio or video of audit calls without explicit, written consent.

4. How we use what we collect

• To deliver the audit, the platform, and the customer-facing dashboard you contracted for
• To communicate with you about your audit, your contract, your account
• To improve the layer's intelligence — using only anonymized operational metadata, never identifiable patient information
• To send you marketing email if you opted in, and only until you opt out
• To analyze how the marketing site performs and improve the funnel

5. Who we share it with

We share information with three categories of third parties, and only as needed to operate:

• Infrastructure providers. AWS for compute and storage, Cloudflare for delivery, Resend for transactional email, Stripe for payment processing. All are bound by their own privacy commitments.
• Operational tools. Apollo for outbound enrichment, Cal.com for booking, Postgres for our operational metadata store. None of these tools receive patient health information.
• Legal authority. If we are compelled by valid legal process, and only after exhausting reasonable challenges to overbroad requests.

We do not share information with marketing partners, ad networks, or data brokers for monetization.

6. How long we keep it

Audit-request and contract data is retained for the life of the engagement plus seven years, or as required by Florida record-keeping law, whichever is longer.

Operational metadata from active platform engagements is retained for 90 days in operational form, then aggregated for trend analysis.

Marketing email engagement data is retained for as long as you remain on the list. You may unsubscribe at any time and request deletion thereafter.

Outbound prospect data is retained for 24 months from last engagement; suppression-list entries are retained indefinitely to honor opt-outs.

7. Your rights

Regardless of where you live, you may:

• Request a copy of the information we hold about you or your practice
• Correct any information that is wrong
• Ask us to delete information we no longer need to operate
• Opt out of marketing email at any time (use the unsubscribe link, or reply STOP)
• Ask to be added to our suppression list (we never email you again)

To exercise any of these rights, email briana@sculptrix.ai. We respond within 30 days, usually within 5.

8. Cookies and analytics

sculptrix.ai uses three categories of cookies and tags:

• Essential. Required for the site to function. Cannot be disabled without breaking the site.
• Analytics. Google Analytics 4, used to understand site performance.
• Advertising. Meta Pixel and LinkedIn Insight Tag, used only to show retargeting ads to people who have already visited the site.

You can disable analytics and advertising cookies in your browser settings. The essential cookies remain.

9. A note on patient health information

If you are a patient of an aesthetic practice that uses Sculptrix: we do not have your information. Your practice manages your patient record inside their practice management system. Sculptrix sees anonymized operational triggers — never your name, contact details, treatment history, or photographs.

For questions about how your practice handles your patient information, contact your practice directly.

For the technical detail of how the layer is architected to keep this true, see /security.

10. How to reach us

Sculptrix LLC
Belle Isle, Florida
briana@sculptrix.ai

We respond to privacy inquiries personally. There is no privacy ticket queue. The note reaches Briana directly.