Front-office teams ask Vera about real situations, and the training library behind it is valuable work. This page describes, plainly, how UptimeUniversity handles both. Our Privacy Policy covers the same ground as a legal document.
AI on our own infrastructure
- Vera's language model and its search run on infrastructure we control.
- Your questions, Vera's answers and your practice's documents are never sent to third-party AI services.
- We don't train AI models on your questions, answers or documents.
Where your data lives
- Accounts, chat history, practice documents and usage records are stored in our own PostgreSQL database, on servers run by our hosting provider, [HOSTING PROVIDER].
- Backups of that database are stored in our Google Workspace account. Chat history is deliberately left out of every backup, so a deleted chat stays deleted.
- Email we send passes through our Google Workspace email.
- Payments are handled by Stripe. Card numbers are entered on Stripe's page and never reach our servers.
Your chat history
- Only you can read your chats. Your practice's owner and managers cannot, and our operator tools do not display them.
- Delete one chat or all of them at any time. Chats are deleted automatically after 90 days without activity.
- For usage limits and abuse detection we keep a one-way hash of each question, not its words.
Accounts and access
- Passwords are stored as one-way scrypt hashes. Invitation links are single-use, expire after seven days and are stored only as hashes.
- The sign-in cookie cannot be read by page scripts, expires after 12 hours and is sent only to the app's own address, never to this website.
- Your plan, your practice and your state are checked on our server on every request, so a lesson, document or regulation outside your plan or your practice is never sent to your browser.
- Your practice's SOPs and checklists are visible only to people on your practice's account.
Protecting the training library
- Usage limits cap how many questions one person can ask in an hour and in a day.
- Vera's answers are checked before you see them, so they paraphrase the training rather than reproduce lesson transcripts.
- Lesson videos stay on Vimeo. The player link is issued by our server only after it checks that your plan includes the lesson.
What your browser contacts
- This website loads nothing from any other company: no fonts, analytics, ad trackers or embedded content, and it sets no cookies.
- The app loads its pages, images and lesson thumbnails from our own servers.
- Playing a lesson loads Vimeo's player from Vimeo. Vimeo then receives your IP address, browser information and which lesson is playing, and the player loads files from Vimeo's content network and Google Cast scripts from Google. We ask the player not to collect analytics and send Vimeo nothing about your account or your questions.
- Subscribing takes you to Stripe's checkout page.
Patient information
UptimeUniversity is a training tool, not a system for patient records. Please don't type patient names or health information into Vera; the app reminds you under every question box.
Reporting a security issue
If you believe you have found a security problem, email [CONTACT EMAIL]. Please give us a reasonable chance to fix it before telling anyone else, and don't access other people's data while investigating.