Consumer Health Data Privacy Policy (Washington, Nevada, Connecticut)

1. Who and what this policy covers

This policy applies to people in Washington and Nevada, as those states' consumer health data laws define them. It also covers consumer health data about people in Connecticut.

This policy covers consumer health data only. It adds to our Privacy Policy (Privacy Policy) and does not replace it. For all other information we collect, and for general privacy rights, see the Privacy Policy and our US State Privacy Notice (US State Privacy Notice (including California Notice at Collection and Nevada notice)).

2. Our approach to health data

BizMeet does not ask for, require or look for health information. The app has no fields for health conditions, disabilities, reproductive or sexual health, gender-affirming care, biometric data or genetic data. We do not use facial recognition.

These state laws define consumer health data very broadly. It can include any information that identifies a person and relates to their past, present or future physical or mental health. So details a member chooses to write in a statement, show in a photo or send in a message might count, even though we never asked for them.

We do not use any information to infer or predict anyone's physical or mental health. We do not scan content for health details, and we do not use automated tools to analyze what members write.

3. Categories of consumer health data we may collect and sources

We may collect consumer health data only when it appears in content that people create. That content is:

Profile statements: your Professional Statement, what you are working on, and what you are looking for.
Notes you add to a connection request, including a Priority message.
Chat messages.
Message previews. We keep a copy of the latest message in each chat to show as a preview in your chat list. Notifications never include message text.
Photos.
Moderation copies. When a member reports, blocks or disconnects from another member, we save a copy of recent messages from that chat as evidence: up to the latest 100 messages for a report, and up to the latest 500 for a block or disconnect, with each message cut to its first 1,000 characters. Any health details in those messages are copied too.
Emails you send us. If you include health details in a support request, a report, a rights request or an appeal sent to contact@bizmeetapp.org, we keep that email to answer you and handle your report. For example, a report about something that happened when you met a member in person might mention an injury.

Work answers. Business sector answers such as Healthcare, Biotechnology, Pharmaceuticals, Fitness & Wellness or Veterinary & Pet Care describe the field a member works in. We do not use them to infer anything about anyone's health.

Sources. We get this information from you, when you post it, send it or email it to us. We may also get it from another member who writes about you in a message, including messages copied as evidence, or from anyone who writes about you in an email to us, such as a report. We do not buy health information or receive it from other companies.

4. Why we collect and use it

We collect and use consumer health data only as needed to provide the service you asked for, and for the safety and legal purposes below (see section 7):

To show what you post on your profile to members who can see it.
To deliver your messages and requests. The latest message in each chat shows as a preview in both members' chat lists. Message text and request notes are never included in notifications.
To keep BizMeet safe: to review reports, including reports about meetings in person, look into harassment, fraud and other misuse, and enforce our Terms of Service (Terms of Service) and Community Guidelines (Community Guidelines). A person at BizMeet does this review.
To answer your emails and requests.
To meet legal obligations, as described in section 5.

We do not use it for any other purpose. We do not use it for advertising, profiling or research, and we do not sell it.

5. Categories we share and with whom

We may share the categories of content listed in section 3 with the following recipients:

Recipient	What they receive	Why
Other members who can see your profile	Your statements and photos.	Because you chose to post it.
The member you message	Your messages and request notes.	Because you chose to send it.
Supabase (processor)	All of the content in section 3, except emails.	Hosts our database and file storage.
Our email provider (processor)	Emails you send to contact@bizmeetapp.org.	Hosts the mailbox where we receive and keep support mail.
Authorities and others with a legal right	Only what a valid legal request requires, what is needed to protect someone from serious harm, or a member's own records and the messages they sent or received, when that member gives us written consent to share them with an agency they name. Those messages can include messages you sent that member.	Legal and safety reasons.
A buyer or successor	The content in section 3, if BizMeet is merged, sold or reorganized.	So the service can continue. This policy would still apply to that data.

Processors handle this information on our behalf to provide their services to us. Our other service providers, such as the service that sends our sign-in codes, our push notification service (Google Firebase Cloud Messaging, which never receives message text) and our payment and subscription providers, do not receive consumer health data.

We do not let any third party collect consumer health data about your activity over time or across other websites, apps or online services.

BizMeet has no affiliates, so we do not share consumer health data with any.

Full list on request. You can ask us for a list of every third party and affiliate we have shared your consumer health data with, including an email address or online way to contact each one. See section 8.

6. No sale and no geofencing

We do not sell consumer health data. We never give it to anyone in exchange for money or anything else of value.

We do not set up geofences, or virtual boundaries, around places that provide health care services.

BizMeet asks your phone only for approximate location, and we do not collect precise location. Your phone rounds your coordinates to a grid about 2 kilometers across before anything is saved, and we store only that rounded point. Other members see only your city name and a rounded distance in whole miles or kilometers, or nothing if you hide your location. We read your location only while you use the app, and we do not track it in the background.

7. Consent

We collect consumer health data only as needed to provide the service you asked for, such as when you post to your profile, send a message or file a report. We share it only with the members you chose, with our processors, and where the law requires or allows it (see section 5). For any other collection or sharing, we first ask for your separate, clear consent.

Health details that other people send us about you, for example in a report or an email, are handled under the law's exception for preventing, detecting and responding to harassment, fraud, security incidents and illegal activity. The same exception covers the moderation copies described in section 3.

You can withdraw consent at any time:

Edit your statements or replace your photos in Edit profile. Your Professional Statement and at least two photos are required, so to remove all of them, delete your account.
Disconnect from or block a member. This deletes the chat for both of you, after we keep the moderation copy described in sections 3 and 10. You can't delete single messages in the app.
A note you send with a connection request can't be edited or removed in the app. It stays with the request, even if the other member declines it. It is deleted if you disconnect after connecting, if either of you blocks the other after connecting, if the member you sent it to blocks you, or if either account is deleted. You can also email us to ask us to delete it.
Delete your account in Settings > Account > Delete account. See Delete Your BizMeet Account.
Email us at contact@bizmeetapp.org.

Withdrawing consent cannot undo what other members have already seen.

8. Your rights and how to exercise them

You have the right to:

Confirm and access. Find out whether we collect, share or sell your consumer health data, and get a copy of it.

Review and correct. Review your consumer health data and change it. You can edit your statements and photos in Edit profile at any time. For anything you can't edit in the app, email contact@bizmeetapp.org and we will correct it or tell you why we can't.

Get the third-party list. Receive a list of all third parties and affiliates we have shared it with, with their contact details.

Withdraw consent. Stop our collection or sharing of it, as described in section 7.

Delete. Have us delete it. We delete it from our live systems and tell our processors and any third parties we shared it with to delete it too. Copies in our hosting provider's backups are deleted when those backups expire, as described under Timing below. We do not use backup copies for any other purpose in the meantime.

No discrimination. We will not deny you the service, charge you a different price or give you a lower level of service because you used these rights.

What we keep. The law lets us keep some information to prevent or respond to harassment, fraud, security incidents or illegal activity. For this reason, moderation copies (see sections 3 and 10) are not deleted when you delete your account or make a deletion request. We use them only for safety and legal reasons. We aim to delete copies from a report 180 days after they were made, and copies from a block or disconnect after 30 days unless a report follows. When we answer your request, we will tell you whether any moderation copies remain and when they will be deleted. Emails sent to us, including reports, may also be kept, but only as the law allows to prevent or respond to harassment, fraud or illegal activity, and never longer than 3 years. Otherwise, when we verify a deletion request, we delete the health details in your emails.

How to make a request. Email contact@bizmeetapp.org from the email address on your BizMeet account. Put "Consumer health data request" in the subject line and tell us which right you want to use. You can also delete your account in the app, which removes your profile, messages and other content. Requests are free.

Verification. We confirm your identity as described in our Privacy Policy, usually by checking that the request comes from the email address on your account. We may ask for more information if we can't confirm it. If we can't verify your request, we will tell you why.

If you don't have a BizMeet account. If you believe a member wrote about your health, email contact@bizmeetapp.org with "Consumer health data request" in the subject line. Tell us enough to find the content, such as the member's first name and roughly when it was sent. We will ask only for the information we need to confirm your request, and we will use it only for that.

Timing

We respond within 45 days after we receive your request.
If we reasonably need more time, we may extend this once, by up to 45 more days. We will tell you about the extension, and why, within the first 45 days.
We complete deletion from our live systems within 30 days after we verify your request. Copies in backups held by our hosting provider are deleted when those backups expire, and no later than six months after we verify your request.

Connecticut

Consent. Where Connecticut law treats health details you choose to post or send as sensitive data, you give your consent by choosing to post or send them. You can withdraw it as described in section 7.

Portability. In addition to the rights above, you can ask us for a copy of your consumer health data in a portable, machine-readable format.

9. Appeals

If we turn down all or part of your request, we will tell you why and how to appeal. To appeal, reply to our decision or email contact@bizmeetapp.org with "Appeal" in the subject line.

Appeals are free. We will answer your appeal in writing within 45 days after we receive it. Our answer will say what we decided on each part of your request, and why.

If we deny your appeal, you can contact your state Attorney General:

Washington: https://www.atg.wa.gov/file-complaint
Nevada: https://ag.nv.gov/Complaints/CSU_Complaints___FAQ/
Connecticut: https://portal.ct.gov/ag/common/complaint-form-landing-page

10. Retention and access

We keep consumer health data only as long as described in our Privacy Policy (Privacy Policy). In short:

Profile content stays until you change it or delete your account.
Messages stay until you or the other member deletes their account, or one of you disconnects or blocks the other.
The latest-message preview in the chat list stays until a newer message replaces it, the chat is deleted by a block or disconnect, or either account is deleted.
Request notes stay with the connection request, including a declined one, until they are deleted as described in section 7.
Moderation copies: copies from a report are deleted about 180 days after they are made; copies from a block or disconnect after 30 days, or about 180 days if a report about that member follows. They are kept for that period even if an account is deleted, and longer only when the law requires it.
Emails you send us, including reports: kept while we need them to answer you and keep a record of your request, and no longer than 3 years. After you ask us to delete your consumer health data, we keep them only as section 8 describes under "What we keep".

Access to consumer health data is limited to people authorized by BizMeet who need it for the purposes in section 4, such as reviewing a report, and who are bound by a duty of confidentiality.

11. Changes and contact

If we make a material change to this policy, we will tell you in the app or by email before the change takes effect, and we will update the effective date above. Before we collect, use or share consumer health data in a materially different way, we will ask for your consent.

Questions or requests about this policy:

Email: contact@bizmeetapp.org
Mail: BizMeet LLC, 2809 E Hamilton Ave, Unit #2177, Eau Claire, WI 54701