Public policy
Privacy notice
Last updated
Information and choice
SozoRock Health is an initiative of The SozoRock Foundation, Inc. We collect information to respond to requests, provide features you choose, protect our services and understand how public information is used. This website is not a place to submit medical records, diagnoses, insurance identifiers, or urgent health information.
Information you choose to provide
A contact, partnership, volunteer, or publication-access request may include your name, email address, organization, role or sector, location, reason for interest, message, and the consent choices shown on the form. We use this information to fulfill the request, communicate with you, prevent misuse, evaluate the quality and reach of publication access, and maintain an appropriate record of the interaction. Publication access requires confirmation of the email address used for the request before a secure download session is created. Receiving future publication updates is optional and is not a condition of accessing a requested publication.
Publication access and attribution
For publication access, we may also record limited first-party attribution and technical context such as the page where a visit began, referring website, campaign parameters included in a SozoRock link, browser and operating-system family, device class, interface language, time zone, and coarse country or region information supplied by our hosting network. A random first-party visitor identifier may be stored in your browser so repeat access attempts can be measured and abuse controls applied without storing a raw network address with the request. We may assign internal quality indicators to publication-access records based on signals such as whether an email was verified, whether submitted text appears incomplete or automated, whether location fields are internally consistent, and whether requests occur unusually quickly or repeatedly. These indicators support data-quality review and service protection; they are not identity proof and are not used for clinical, insurance, employment, credit, or eligibility decisions.
Resident Access Layer and mobile app
In a supported mobile or shared-tablet readiness flow, we receive only the journey you selected, a ZIP code or Health Equity Hub reference, the non-clinical support option you selected, the interface language, whether the request came from the mobile or kiosk experience, and the consent record shown before submission. We do not ask for your name, email address, medical history, symptoms, diagnosis, treatment information, insurance details, or other protected health information in this flow. Sending a request does not create a provider relationship, confirm eligibility, or connect you to a licensed provider.
Website and security information
Our hosting and security services may process limited technical information such as the date and time of a request, browser or device type, requested page, referring page, campaign source, and network address. We use this information to operate the website, diagnose errors, measure general use, and protect against automated abuse. Rate-limiting and publication-access records use a salted, one-way representation of a network address where a durable abuse identifier is needed; the raw network address is not stored with the publication request by the application.
Voice Access
Microphone access begins only after you review the voice notice and agree. On the website, OpenAI processes microphone audio during the live, non-clinical Voice Access session. OpenAI states that API data is not used to train its models by default. Under the standard API data controls, content may be retained in abuse-monitoring logs for up to 30 days under OpenAI's API data-controls policy. In the mobile app, speech recognition may use the speech service available on the Apple or Android device and may be processed under Apple's, Google's, or the device provider's terms. SozoRock Health does not send a device-speech transcript to its access-request API or store it with a request. Do not share medical records or protected health information. You can stop a session at any time, and text or tap options remain available. SozoRock Health does not intentionally record or retain raw microphone audio.
How information is shared
We may share information with service providers that operate the website, protect it, deliver requested email, or support an feature you choose. They may use the information only to provide those services to support those services. We may also disclose information when required by law, to protect people or our services, or as part of an organizational transaction permitted by law. We do not sell personal information or use it for behavioral advertising.
Retention and security
Contact inquiries are scheduled for deletion after one year unless they become part of an active relationship or a longer period is required by law. Resident Access Layer requests and their consent records are scheduled for deletion after 30 days. Their short-lived abuse-prevention records use a salted, one-way representation of a network address and expire separately; the network address is not stored with the request. Publication-access requests, consent records, attribution context, quality indicators, and related activity records are scheduled for deletion after 180 days. Verification links expire after 30 minutes and verified secure-access sessions after 12 hours. We use administrative, technical, and organizational safeguards appropriate to the information, but no internet service can guarantee absolute security.
County-Based Community Access Platform
CB-CAP is a separate Foundation product for county-level systems intelligence. Review its privacy information when using that product. Do not submit individual medical records through a Health contact or publication form.
Children and external services
This public website is intended for a general audience and is not designed to collect personal information directly from children under 13. Links to provider, public-agency, social-media, and other external services lead to sites with their own privacy practices.
Your choices
You may ask to access, correct, or delete information you submitted, or withdraw an optional communications choice, subject to identity verification and legal, security, and operational obligations. Email contact@sozorockfoundation.org and describe your request. We may update this notice as the service changes and will post the revision date on this page.