Privacy Policy

Arclight Feasibility Planner provides healthcare service-planning instructions, templates, and an optional calculation script inside the user's ChatGPT or Codex environment. It uses public, aggregate, or synthetic inputs. Its packaged script makes no network calls. The plugin has no Arclight server, account connection, analytics, or intake endpoint and does not transmit conversations or files to Arclight. Arclight does not collect, receive, share, or retain personal information through the plugin itself.

Content entered in ChatGPT or Codex is processed under the user's applicable OpenAI agreement, workspace configuration, retention settings, and data controls. Users manage conversations and generated files using the controls of their host environment; the plugin does not establish that data remains on a local device. Host-enabled browsing of public sources is governed by that environment and the visited source's terms. Do not provide patient records, protected health information, government identifiers, payment-card data, or credentials. Arclight's BAA and security controls do not cover public plugin chats. Separately contacting Arclight through this website is governed by the other provisions of this policy; do not send patient records through the public form or ordinary email.

Arclight Readiness Navigator is a skills-only plugin that provides instructions and static reference material inside ChatGPT and Codex. The plugin does not operate an Arclight server, connect to an Arclight account, transmit chat content or uploaded files to Arclight, or provide Arclight with access to a user's plugin conversations. Arclight does not collect, receive, share, or retain personal information through the plugin itself. Content entered in ChatGPT or Codex is processed by OpenAI under the user's applicable agreement, workspace configuration, retention settings, and data controls. Arclight's BAA and security controls do not cover the public plugin chat.

The public plugin is intended for de-identified or synthetic information. Users should not provide protected health information, government identifiers, payment-card data, credentials, or other restricted information to the plugin. If identifiable records are necessary, they should be used only in an organization-approved HIPAA-eligible product and configuration under applicable agreements, including a business associate agreement where required, together with appropriate access, retention, security, and human-review safeguards. A BAA alone does not make every feature, plugin, connector, or workflow compliant. Users control their plugin conversations through the data and deletion controls available in their own OpenAI account or workspace. If a user separately contacts Arclight through this website, the information submitted through the website is handled under the other provisions of this Privacy Policy. Do not send patient records through the public inquiry form or by ordinary email. A later professional engagement, including any exchange of identifiable records, is separate from plugin use and is governed by the applicable engagement terms, authorization, privacy and security procedures, and any required business associate agreement.

This Privacy Policy applies to information collected through our website and ordinary business communications, and to the plugin-specific provisions in this policy. It does not apply to information governed by a separate written agreement, client engagement, data processing agreement, business associate agreement, nondisclosure agreement, or other contract.

General website forms and ordinary email are not approved channels for patient records, protected health information, or confidential whistleblower materials. Where Arclight provides a dedicated private intake channel, submissions through that channel are governed by its specific privacy notice, access controls, and consent process. Do not submit health information through Agents of Change.

We may collect the following categories of information:

Do not submit protected health information, patient records, Social Security numbers, financial account information, privileged materials, confidential business information, or other sensitive information through general website forms or ordinary email unless we have expressly agreed in writing to receive it through an approved secure process.

If you submit sensitive information without such an agreement, we may delete it, decline to review it, or handle it as reasonably necessary to protect our systems, comply with law, or respond to your inquiry.

We may use information to:

We may use cookies, pixels, analytics tools, log files, and similar technologies to understand website traffic, improve the website, remember preferences, and protect website security.

You may be able to disable cookies through your browser settings. Some website features may not function properly if cookies are disabled.

Except as specifically stated in the Mobile Information and SMS Privacy section below, we may disclose information:

We do not sell personal information in the ordinary meaning of exchanging it for money. We do not knowingly sell sensitive personal information.

Arclight Action uses mobile information solely to provide and manage conversational, person-to-person text communications requested or authorized by the recipient.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

Arclight Action does not sell mobile information, text messaging opt-in data, or SMS consent.

Recipients may withdraw consent at any time by replying STOP, QUIT, END, REVOKE, OPT OUT, CANCEL, or UNSUBSCRIBE to an Arclight Action text message. For assistance, reply HELP or contact info@arclightaction.com.

Arclight's work may involve analysis of public records, public datasets, government materials, industry documents, published information, and other lawfully available sources. If we publish research or commentary, we generally seek to rely on public, de-identified, aggregated, contextualized, or otherwise appropriate information, but published work may reference names, entities, data, events, or materials that are publicly available or otherwise lawfully used.

We use reasonable administrative, technical, and organizational measures designed to protect information. However, no website, email system, or electronic transmission is completely secure. You should not submit sensitive information through unsecured channels.

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including business operations, research integrity, legal compliance, dispute resolution, security, and recordkeeping.

You may contact us to request access to, correction of, deletion of, or restriction of certain personal information, subject to applicable law and reasonable verification. You may unsubscribe from marketing or update emails by using the unsubscribe link, if provided, or by contacting us.

The website is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us.

The website may link to third-party websites or services. We are not responsible for the privacy practices, content, or security of third-party websites or services.

We may update this Privacy Policy from time to time. The revised version will be posted with an updated effective date. Your continued use of the website after changes are posted means you acknowledge the updated Privacy Policy.