SSSAYS Privacy Policy

This Privacy Policy explains how SSSAYS, the trade name under which the Service is provided ("SSSAYS," "we," "us," or "our"), handles personal information related to https://scalysssays.com, its community features, the Marketplace, and related communications (the "Service"). It applies to visitors, Members, prospective Marketplace participants, and people who contact us.

SSSAYS primarily serves the healthcare community in Puerto Rico and the United States. Members may also use the Service while studying, working, or residing in other countries, in accordance with the eligibility requirements in the Terms.

The Terms and Conditions and Rules govern participation in SSSAYS. This Policy describes our information practices. Accepting the Terms or acknowledging this Policy does not provide blanket authorization for every use of personal information. Specific permissions are requested separately when appropriate.

For privacy questions or requests, email admin@scalysssays.com.

a. Account and identity. We collect your email address, authentication information, legal first and last names, date of birth, username, selected avatar, profession, interests, and registration details. A second last name and certain professional details are optional. We also record account status, verification events, and relevant security activity. If you add an optional contact phone number, it is stored as private contact information; it is not currently a method for signing in or recovering your account.

b. Profile and contributions. We collect the biography and other profile information you provide, posts, replies, comments, photographs, links, polls, scale responses, reactions, Helpful activity, drafts, and related publication and editing records. Information you include in text or images may identify you or someone else even when you use a pseudonym. Your contributions and responses may also reveal sensitive information, including information about your own health.

c. Preferences and activity. We record information needed for saved items, Members and content you follow, interests, notification settings, recent searches, viewed content, and relevance controls, such as requests to see more or less of a topic. We also record certain sharing actions and visits or clicks to Marketplace destinations. Recording a sharing action does not, by itself, give us the contents of a private message sent through another application.

d. Technical information. Our systems and providers may record IP addresses, browser and device information, session identifiers, request dates and times, pages or features used, navigation referrals, errors, and security logs when you use the Service or interact with our communications.

e. Support, moderation, and acceptance records. We collect inquiries, reports, appeals, supporting materials, administrative actions, and information needed to investigate requests or incidents. We retain records of document acceptance and consent choices presented through the Service. These records may include the associated account and session, date and time, document version, language, declaration presented, and selected choice. We also retain the corresponding document versions.

f. Marketplace inquiries. We collect the business name, contact person, business email address, phone number, website, categories, description, and materials provided with an inquiry or listing application.

g. Sources. We receive information from you, automatically through your use of the Service, and from providers supporting account verification, communications delivery, security, and other functions described here. We may also receive information about you in other people's contributions, reports, or support requests.

We use personal information to create and administer accounts; evaluate registration eligibility; authenticate access; maintain profiles and participation features; save drafts and preferences; and provide the features you request. We also use activity and preferences to organize content and personalize recommendations.

We use information to communicate with you, deliver notifications and news according to the corresponding permissions and preferences, respond to inquiries, evaluate Marketplace applications, and administer listings.

We use relevant information to investigate reports, moderate content, prevent abuse and unauthorized access, resolve technical problems, understand use of the Service, improve its operation, document acceptances and administrative actions, address legal matters, and establish, exercise, or defend claims.

Public contributions and associated public profile information may appear in SSSAYS communications and materials within the permissions described in the Terms and the limits of Section 8. We do not treat private identity records, private drafts, or confidential administrative communications as public promotional material merely because they were submitted to SSSAYS.

SSSAYS is a community with publicly accessible content. Your username, avatar, biography, membership information, and eligible published contributions may be visible to Members and visitors. Your profession is displayed by default, subject to the available profile control; interests have a separate visibility control and are not displayed by default. Review your profile before sharing information you do not want to display publicly.

Your account email address, legal identity record, date of birth, and private contact phone number are not displayed as public profile fields. Saved items, drafts, recent searches, and the list of people you follow are not presented as public profile content. Authorized personnel and providers may process nonpublic information as described in this Policy.

Polls and experience scales may display your username and avatar in a participant list. Your individual selection does not appear alongside your profile in that list, but the Service stores your response linked to your account. Results or a small number of participants may allow others to infer a selection. Do not assume participation is anonymous.

A pseudonym does not guarantee anonymity. Your words, images, affiliations, activity, or other details may identify you. Public information may be copied, shared, indexed by search engines, or retained by third parties. We cannot retrieve screenshots or copies beyond our control.

a. Information you must not provide. Do not use the Service to publish or transmit patient-identifying information, confidential professional records, access credentials, privileged communications, or other people's private information in violation of the Terms, Rules, or your legal and professional obligations. Removing names does not necessarily prevent identification through dates, images, locations, distinctive circumstances, or other details.

SSSAYS is a discussion community. It is not intended to operate as a clinical records system, a channel for confidential professional communications, or an emergency service. Use of the Service does not, by itself, establish a confidential professional relationship or a business associate agreement for handling health information.

b. Photographs and other materials. Uploaded images may undergo validation, conversion, resizing, and metadata removal through available processes. That processing does not guarantee anonymization or necessarily remove visible identifying information, such as faces, identification cards, labels, locations, or document text. You must review content before submitting it and must not rely on technical processing to meet your confidentiality obligations.

c. Authorized access. Authorized personnel and providers may access nonpublic information when reasonably necessary to operate, protect, support, moderate, or administer the Service; investigate reports, requests, or incidents; address legal obligations; or establish, exercise, or defend claims. Information being nonpublic does not mean it is inaccessible for these purposes.

Administrative access to private identity records is subject to specific controls. Administrative actions involving access to and correction of those records are documented for review.

d. Reports and administrative communications. Reports, appeals, and support communications are not presented as ordinary community posts. However, relevant information may be shared with authorized personnel, providers, advisers, authorities, or other people when reasonably necessary to address the matter, in accordance with this Policy's purposes and limits and applicable law.

e. Accidental disclosures. If you identify a possible unauthorized disclosure, promptly report it through available controls or to admin@scalysssays.com. Whenever possible, provide a link and a description sufficient to locate the material, avoiding unnecessary repetition or redistribution of sensitive information.

a. Service operation. The Service uses cookies, browser storage, and related technologies to maintain sessions, protect access, remember a return destination, and temporarily retain registration progress or a pending acceptance step. The current registration progress feature does not save your legal name or date of birth in that local record. Clearing browser storage may sign you out or remove local progress without deleting information already stored on our servers.

b. Traffic analytics. We use Lovable's analytics tools to understand the Service's traffic and use, evaluate its reach, and improve its operation. These tools may record visits, pages viewed, traffic sources, browsing session identifiers, dates and times, and information about browsers, devices, and languages. They may also infer a country from the browser's time zone; that inference does not necessarily reflect a person's actual location.

Statistics may include visits, page views, visit duration, traffic sources, and breakdowns by country and device type. A visit represents a browsing session, not necessarily a different person. Measurement uses a temporary visit identifier that is separate from your account identifier. Signing in to SSSAYS does not by itself link this counter's visits to an account. This does not eliminate the account activity records described elsewhere in this Policy or mean that all technical data is anonymous.

c. Infrastructure providers. Providers receive technical requests necessary to deliver their services. For example, externally hosted fonts load through Google Fonts, and hosting, authentication, and storage providers receive the connection information needed to serve their resources. Infrastructure protection services, such as Cloudflare, may use cookies and technical data to detect automated traffic and protect the site. Email measurement is described in Section 7.

d. Available controls. You can manage cookies, storage, and other privacy features through available browser controls. Remote image loading can also be managed through your email application. Blocking these features may affect sign-in, presentation, or other features. The Service currently does not offer its own switch to disable only traffic analytics.

The Service currently does not change its operation in response to the browser's general Do Not Track setting. This setting is distinct from other specific mechanisms for communicating privacy preferences.

a. Account and service communications. We send communications such as verification codes, security alerts, password-related messages, support responses, and important administrative or legal notices. Other messages include feature notifications, news summaries, and promotional communications, according to the corresponding preferences and permissions.

b. News and promotional communications. Accepting the Terms and Rules, or acknowledging this Policy, does not by itself provide specific permission to receive news or promotional communications. Subscription to these emails is requested separately and is optional. You can use the Service without subscribing and unsubscribe through the link included in those messages.

c. Email providers and measurement. We use Zoho Campaigns for news and promotional emails. To manage subscriptions and delivery, we may provide that service with your email address and necessary information about subscription status and corresponding preferences.

Records may include messages sent, delivery failures, unsubscribes, and campaign activity. When email measurement is enabled, tracking pixels and tracked links may record opens, clicks, IP addresses, dates, times, and related technical information. Email privacy features may affect the accuracy of these measurements.

d. Unsubscribing and independent preferences. Unsubscribing from news or promotions does not automatically disable platform notifications or prevent necessary account, security, administrative, or legal communications. Use the controls available in your account to manage other optional notifications.

e. Account closure and suppression records. Account closure and mailing list management require separate processes and may not finish simultaneously. You can use the unsubscribe link or request help at admin@scalysssays.com. Limited suppression records may be retained to continue honoring an unsubscribe request, prevent improper reenrollment, and document applicable preferences.

a. Public participation and promotion. We display and distribute information you submit for publication as described in Section 4 and the Terms. This includes presentation within the Service and use of available content-sharing features.

Public contributions may appear in SSSAYS communications and promotional materials within the corresponding permissions. We will not use a Member's identifiable personal health experience as a testimonial in an advertising campaign without specific authorization for that use. The original publication and its circulation through ordinary sharing features do not, by themselves, provide that authorization.

b. Service providers. We use providers for hosting, authentication, databases, file storage, email delivery, security, usage measurement, and technical support. Current examples include Supabase for account services and data infrastructure, Lovable for development and hosting, and Zoho for emails and campaigns. Other technical services are described in Section 6.

Providers receive information relevant to their functions. News synchronization does not send legal names or dates of birth. A provider's involvement does not make your private identity record part of your public profile.

c. Legal and security matters. We may disclose relevant information to address legal obligations or valid legal process, or when reasonably necessary to investigate abuse, protect people or the Service, enforce applicable terms, or establish, exercise, or defend claims. This may involve authorized advisers, public authorities, or parties involved in resolving a dispute.

d. Organizational changes. If the Service or relevant assets are subject to a merger, acquisition, reorganization, or transfer, information may be disclosed to advisers and a prospective or actual successor as reasonably necessary, with appropriate confidentiality protections. A transaction does not, by itself, authorize materially incompatible new uses under this Policy.

e. Requests, sharing features, and authorizations. We may evaluate and, where appropriate, disclose information in response to your request, your use of a feature intended to share it, or sufficient authorization, within the corresponding scope.

Merely submitting a request or authorization does not obligate SSSAYS to disclose information or grant access to internal records, third-party information, privileged materials, or data subject to security, confidentiality, or retention restrictions. We may verify the requester's identity and authority, clarify the scope, and limit or deny disclosure as described in Section 12.

Marketplace participation alone does not give a business access to Members' private identity or contact records.

f. Sale and exchange of information. SSSAYS does not sell personal information or exchange it with third parties for targeted advertising or to create external advertising audiences. This does not prevent processing by providers to deliver the Service or the disclosures described in this Policy. Any material change in these practices will be addressed under Section 16.

An inquiry about participating in the Marketplace is an administrative communication; it does not automatically become a public listing. Approved business information and materials intended for publication may be made public and promoted under the Terms. Administrative contact details are not treated as promotional material merely because they accompanied an inquiry.

Following a link to a news source, visiting a provider's website, using an external sharing application, or contacting a business directly takes you to a separate service. That recipient handles information you provide and ordinary connection data according to its own practices. Review its privacy information before submitting personal data.

SSSAYS does not control those third parties' independent practices. Including a link or listing does not guarantee their information handling.

SSSAYS currently does not offer Marketplace checkout or collect payment card information for Marketplace purchases.

We use account preferences and activity to order or recommend content and support the Service's operation. This may include automated processing of interests, viewed content, follow relationships, and relevance feedback.

The Terms describe possible uses of artificial intelligence and other automated tools where implemented. This does not make every possible use an existing practice or authorize unrestricted use of private information.

If we introduce a materially different use of personal information, including a new use related to artificial intelligence, we will address it under Section 16.

We retain information for this Policy's purposes, considering its type and sensitivity, the account and its preferences, the continuing need for the feature or record, security and abuse prevention needs, legal obligations, and pending disputes or preservation requirements. Different records may have different retention periods.

Deactivating and deleting an account are different actions. Deactivation may retain information to allow account reactivation. Deletion removes sign-in access and deletes or unlinks categories of private identity, preferences, drafts, and personal activity through the closure process. It does not necessarily remove all published contributions or related administrative records.

Published contributions may remain to preserve existing conversations, generally attributed to "Former Member" after account deletion. Retained words or images may still identify someone. Ordinary editing and deletion controls follow the Terms and feature restrictions. Requests about personal information requiring separate review or removal are handled through the procedure in Section 12.

Relevant acceptance and consent records, moderation and security records, email suppression records, and information subject to legal preservation may remain after closure. A record may also retain a former username to prevent reuse.

Copies in backups or provider systems may persist according to their applicable retention and deletion processes. Deleting an account does not delete delivered emails or copies independently retained by others.

When information is no longer necessary and no applicable preservation requirement exists, we will delete or deidentify it through the relevant retention process. Replacing a visible username does not necessarily anonymize content.

a. Available controls. You can use account controls to review or edit your profile, manage profession and interest visibility, update eligible contact details, clear recent searches, manage optional notifications, and request account closure. Some corrections to private identity information require administrative review and are unavailable through ordinary profile editing.

b. Privacy requests. You may email admin@scalysssays.com to request access to or correction of personal information, data deletion, information about its processing, or assistance with another privacy right.

Depending on applicable law and the circumstances, you may also have the right to receive information in a portable format, limit or object to certain uses, withdraw consent, opt out of certain types of processing, appeal a decision, or file a complaint with a competent authority. Mentioning these rights does not mean all of them apply to every person, item of information, or Service activity.

c. Verification and representation. Before disclosing information or carrying out a request, we may require information reasonably necessary to verify your identity, clarify what is requested, and confirm your authority to act for someone else. Submitting a request does not, by itself, grant access to internal records or third-party information.

Do not send your password, verification codes, or unnecessary sensitive documents. If additional information is needed, we will explain the corresponding procedure.

d. Evaluation and limits. We will evaluate each request based on its scope, available information, and applicable law. We may limit or deny a request when there is a legally permitted basis, including inability to adequately verify identity or authority, protection of third-party rights, confidentiality obligations, security concerns, legal privileges, or valid retention requirements.

We will respond within required deadlines and provide the explanations and review or appeal mechanisms that apply under applicable law. These limits will not be used to exclude rights or obligations that cannot legally be limited.

e. Withdrawal of consent and exercise of rights. When processing depends on your consent, you may request to withdraw it through the available mechanism or by emailing the address provided. Withdrawal does not affect the lawfulness of prior processing or prevent retention or processing when another applicable legal basis exists.

We will not take discriminatory actions prohibited by law because you exercise a privacy right. However, certain features may become unavailable when they require information or processing necessary for their operation.

We use technical and administrative measures designed to protect information, including authenticated access, separation of private identity from public profiles, access restrictions, and administrative audit records. These measures do not guarantee prevention of every incident or absolute security of communications, storage, or access.

Protect your password, email account, verification codes, and devices, and sign out on shared devices. Promptly email admin@scalysssays.com if you suspect unauthorized access or accidental disclosure.

We will evaluate reported incidents and take appropriate investigation, response, and notification measures.

SSSAYS is not directed to people under 18, and we do not knowingly permit them to register. The Terms also require legal capacity or the valid arrangement they describe; reaching age 18 does not necessarily establish legal capacity in every jurisdiction.

If you believe someone under 18 has provided personal information through an account, email admin@scalysssays.com. We will investigate and take appropriate steps to restrict the account and remove information collected contrary to these requirements, while addressing legitimate preservation needs.

SSSAYS operates in connection with Puerto Rico and uses infrastructure and providers that may process information in the United States or other places where they operate. Information is not necessarily stored only in Puerto Rico, and protections may vary by jurisdiction.

Transfers take place for the purposes described in this Policy and with the corresponding safeguards.

We may update this Policy to reflect changes in the Service, our practices, providers, or applicable requirements. The published version will identify its effective date.

Material changes will be communicated through the Service, email, or another appropriate means. When a change requires consent or another prior action, we will request it before applying the change. Continued use does not replace consent that must be obtained separately.

a. Relationship to the Terms and liability. This Policy supplements the Terms and Conditions. The provisions on warranties, liability, and limitations of liability in their Sections 19 and 20 are incorporated by reference as relevant. This Policy does not make SSSAYS a guarantor of absolute security, anonymity, continuous availability, or third parties' independent conduct.

b. Consistency among documents. This Policy governs the general description of personal information processing. A specific notice or consent governs the particular processing it describes and does not expand permission for other uses. If this Policy conflicts with a general provision of the Terms concerning privacy practices, this Policy controls on that subject. The Terms' limitations of liability do not expand permission to use information or eliminate the specific commitments made here.

c. Controlling language. The English version will control if there is a discrepancy with a translation, to the extent permitted. Translations are provided for convenience.

d. Severability. If a provision of this Policy is held invalid or unenforceable, it will be limited or severed, and the remaining independent provisions will continue in effect.

e. Governing law and venue. This Policy will be interpreted under the laws of the Commonwealth of Puerto Rico and applicable United States federal law. In accordance with Section 22 of the Terms, disputes relating to this Policy or the Service must be brought before the courts of the Commonwealth of Puerto Rico or the United States District Court for the District of Puerto Rico, as appropriate, unless a mandatory rule provides otherwise.

f. Scope. Nothing in this Policy excludes rights, obligations, or liabilities that cannot be limited, or prevents recourse to a competent authority.

For inquiries or requests about this Policy or SSSAYS's handling of personal information, email admin@scalysssays.com.

Include enough information to identify your account or request, avoiding passwords, verification codes, or unnecessary sensitive information. If your concern involves a post, provide its link and a description sufficient to locate it.