Privacy Policy
Last updated: March 2026
Data We Collect
2567POC collects only the information necessary to provide the service: your account email, facility information, CMS-2567 form uploads, and Plan of Correction content. CMS-2567 forms use the Resident #1 / Resident #2 notation — no personally identifiable resident information is collected or stored.
HIPAA
2567POC does not collect, store, or process Protected Health Information (PHI). The CMS-2567 form uses resident identifier notation that does not include names, dates of birth, or other PHI. Facilities should not include PHI in any field within 2567POC.
Data Retention
Your data is retained for the duration of your subscription plus 90 days after cancellation, during which you may export all records. After 90 days, data is permanently deleted.
Contact
Questions? Email privacy@2567poc.com