Effective September 22, 2026
Privacy policy
Body in View is operated by Scalability Inc. (“we,” “us”). This policy explains how we handle information when you visit our website, create an account, use the consultation tools or contact us.
Contact: hello@scalability.us (subject: “Body in View — Privacy”). Postal address: Scalability Inc., 489 5th Avenue, New York, NY 10017, United States.
Information we handle
Accounts and clinics. We process your email address, authentication information, email-verification status, account identifier and account activity. If you provide them, we also store your display name, clinic name and clinic contact details. Clinic records include membership role and trial start and end dates. Our authentication provider manages password credentials; passwords are not stored in the consultation interface.
Payments and subscriptions. Stripe hosts payment checkout and the billing portal and collects the payment and billing information you enter there. We send Stripe your account email address and clinic identifier to create and manage your subscription. Our account database stores Stripe customer and subscription identifiers, plan information, subscription status, billing-period dates and cancellation status to administer billing and access. We do not store full card numbers or card security codes in our application database.
Support. When you submit the contact form or email us, we receive the information you send, such as your name, email address, topic and message. Please do not include patient-identifying information, medical records or account passwords in support messages.
Technical information. Hosting, authentication, email and security services process technical information needed to deliver and protect the service. This may include IP address, browser and device information, request timestamps, error and security logs, and email delivery events. Anti-abuse checks may use browser and request signals to assess whether a submission is automated.
Consultation materials. In the current consultation implementation, reference images you choose, annotations, captured views, clinician notes and visit-summary content are processed in the browser tab. These features do not upload those materials to our account database. Starting a new consultation clears visit content; reloading or closing the tab can also discard it. Practice details entered in the visit-summary editor remain in that tab until reload. This is not a cloud patient-record storage or backup service.
A PDF you download or a document you print becomes a separate copy under your or your clinic’s control. Clearing the consultation does not delete exported files, original images, printouts or copies saved by your browser, operating system or connected storage services.
Why we use information
We use information to provide and secure the service, authenticate users, maintain clinic settings, administer trials and paid subscriptions, deliver account emails, answer support requests, investigate failures or abuse, and meet applicable legal obligations. We do not use consultation content to diagnose a patient or provide personalized medical advice.
Providers and disclosures
We use service providers to operate Body in View:
- Vercel: website hosting, application delivery and security. The contact form uses Vercel BotID Basic to check browser challenges and help prevent automated submissions.
- Supabase: account authentication and clinic/account database.
- Resend: account and support email delivery.
- Stripe: payment checkout, recurring subscription billing and the customer billing portal.
- Our support mailbox provider: receives and stores correspondence addressed to hello@scalability.us.
We share information with these providers as needed for their services. We may also disclose information when required by law, to protect rights and security, or as part of a corporate transaction subject to applicable safeguards. We do not send browser-only consultation materials to these providers through the consultation features described above.
Stripe also processes payment and technical information for its fraud prevention, security and legal obligations, as described in its privacy policy at stripe.com/privacy. Consultation reference images, annotations and clinician notes are not sent to Stripe by these billing features.
Cookies and device storage
We use authentication cookies to keep you signed in and support secure account recovery. These cookies are distinct from saved consultation preferences. Quick views store a limited set of generic anatomy selections and display preferences in your browser’s local storage, on that device; they do not include images, free-text notes or annotations. You can remove quick views in the app or clear browser site data. Clearing authentication cookies signs you out. Security checks process browser challenge responses and request information to help prevent abuse.
Retention and deletion
We retain account information to provide your account until you request closure, subject to information needed for security, unresolved disputes or legal obligations. Billing and transaction records may be retained as needed for accounting, tax, dispute resolution and other legal obligations, including after account closure. Support correspondence is retained as needed to resolve your request and related follow-ups. Operational logs are retained according to the relevant provider’s settings and security needs. Backup copies may remain until replaced or expired under the provider’s backup cycle. We do not currently offer an automatic deletion schedule; contact us about the data held for your account and applicable deletion options.
You can contact us to request access, correction or deletion of your account information. We may need to verify your identity and may retain information when legally required. Self-service account deletion is not currently available. If your request concerns a clinic’s patient information or an exported visit summary, contact that clinic, which controls those records.
Your privacy choices and rights
Depending on your location and applicable law, you may have rights to access, correct, delete or receive a copy of personal information, or to restrict or object to certain processing. Send requests to hello@scalability.us. We respond within the time required by applicable law and explain any applicable limitations. Where available, you may complain to your local privacy regulator.
Security, international processing and children
We use access controls and security measures intended to protect account information. No system can guarantee complete security. Secure your devices, account credentials and exported documents, especially on shared clinic screens.
Our service uses infrastructure in the United States; providers may process information in other locations.
Body in View accounts are intended for adult professional users, not children. Patient-facing educational use should be supervised by the responsible professional.
Changes
We will post updates here with a revised effective date and provide additional notice where required. Contact hello@scalability.us with questions.