Privacy Policy

1. Overview

Borderless (“Borderless,” “we,” “our”) provides practice operations software to dermatology clinics. This Privacy Policy explains what information we collect from visitors to withborderless.com and from clinic staff who use the Borderless application, how we use it, and the choices you have.

Borderless is a Business Associate under HIPAA for its clinic customers. Protected Health Information (PHI) is governed by the Business Associate Agreement (BAA) we sign with each customer, not by this Privacy Policy.

2. Information we collect

• Marketing site. Standard server logs (IP address, user agent, referrer), and any information you submit through a form (name, work email, practice name, EHR, message).
• Application. Account information for authorized clinic users, telemetry needed to operate and secure the product, and clinic data your practice authorizes us to sync from your EHR under a BAA.
• Cookies. Essential cookies for authentication and product analytics for aggregate usage measurement. No third-party advertising cookies.

3. How we use information

• Operate, secure, and improve the Borderless product.
• Respond to demo requests and support inquiries.
• Comply with our contractual and legal obligations, including HIPAA.

4. How we share information

We do not sell personal information. We share information only with subprocessors required to operate the service (infrastructure, monitoring, email), each under a written contract that requires appropriate safeguards. A current subprocessor list is available on request.

5. Data retention

Marketing submissions are retained until they are no longer needed for the purpose collected or as required by law. Clinic data retention is governed by the customer’s BAA and the applicable Order.

6. Security

Encryption in transit and at rest, role-based access controls, full audit logs, and read-safe EHR sync. Full detail is available in our HIPAA posture page and, for customers, in our security review packet.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information we hold about you, and to object to certain uses. To exercise these rights, email privacy@withborderless.com. For PHI, please contact your treating clinic — as a Business Associate, we cannot act on individual PHI requests without direction from the Covered Entity.

8. Contact

Questions about this Policy: privacy@withborderless.com.