OrthoTruss- Desktop Pioneer plans and guest browser Roadmaps stay on your device. Optional account-saved Roadmaps and Location Scout store the information described below.
- Hosted AI, licensing, payments, support, updates, public-data requests, and sponsor interactions require network services.
- Stripe handles purchase payments. OrthoTruss does not receive your complete card number or security code.
- We do not sell, rent, or share your personal information with advertisers or data brokers.
Who this policy covers
This policy covers orthotruss.com and the OrthoTruss product family. It explains website information, local software data, and the information processed when you use connected features. Jean-Marc E. Choufani operates under the OrthoTruss brand. The current Pioneer purchase terms name OrthoTruss LLC as the Pioneer seller. Product-specific notices and accepted agreements also apply; the relevant agreement identifies your contracting party. Contact address: 701 Buckskin Drive, Round Rock, Texas 78681, United States.
What we collect and why
Account & license data
Desktop profiles and hosted accounts are different. A Pioneer desktop profile is stored locally. Signing in to Pioneer Web uses Clerk for authentication; OrthoTruss hosted account services store your verified email, account identifiers, accepted terms version, account status, and related activity records. Purchases, trials, Scout access, subscriptions, and an explicit desktop-account link add the corresponding transaction, entitlement, and device-link records. Licensing and delivery may involve Keygen and Resend. Account sign-in and security require session storage; signing in does not itself upload your desktop project database.
Payment data
Stripe processes subscription and purchase payments. OrthoTruss receives customer contact details, billing and transaction identifiers, purchased product, tax and payment status, but not your complete card number or security code. See Stripe’s privacy policy. A clinical practice that configures its own payment integration uses its own provider account; that is separate from buying OrthoTruss software.
Project and planning data
Pioneer desktop plans, assumptions, budgets, checklists, KPI entries, and uploaded planning documents are stored on your device. A guest Pioneer Web Roadmap stays in that browser’s local storage database; browser storage can be lost when site data is cleared. Signing in alone does not upload a guest plan. If you explicitly enable account saving and confirm the first upload, we store the saved Roadmap answers, notes, evidence, dates, payer follow-ups, and fee worksheet in the hosted account service. The saved editor also keeps a local draft and recovery copies on that device; a local save is not confirmed online until the server acknowledges it. Keep exports and backups. OrthoTruss does not centrally collect your KPI outcomes for peer benchmarking. Requested AI, market-data, support, and account features process the information described below.
Hosted Location Scout
Location Scout saves your searches and analysis inputs, results, shortlisted locations, notes, and related timestamps in OrthoTruss hosted storage linked to your account. These records are separate from the device-local Roadmap and desktop plans. The hosted account export includes saved Scout searches and shortlist records. Clearing browser data or uninstalling the desktop app does not delete hosted Scout records; use account controls or contact us about access or deletion.
Market & demographic data
When you request market, employer, payer, map, or site analysis, ZIP codes, selected geography, or a candidate-site address may be sent to OrthoTruss data services, the US Census Bureau, CMS/NPPES-related sources, the Census geocoder, or OpenStreetMap Nominatim. These services return requested public-data or location results.
AI Copilot (Pro)
When you invoke Pioneer hosted AI, your prompt and relevant project context selected by the application pass through an OrthoTruss service to Anthropic. Using your own Anthropic key sends the selected prompt and context directly to that provider. The offline guide and local Ollama do not send the AI prompt to OrthoTruss or Anthropic. Provider retention and safety policies apply; we do not promise zero provider retention. Do not submit protected health information (PHI) or patient records.
Feedback submissions
The current Practice Pioneer support form sends your email, app version, operating system, selected issue categories, and the structured diagnostic answers shown before submission. It does not upload arbitrary project files or diagnostic logs. We use this information to respond, investigate, and improve reliability.
Feature-interest and sponsored-placement events
A confirmed no-cost session may send one event per locked feature containing only the surface name and app version, without an account, project, machine, or persistent user identifier. Sponsor impressions and clicks may be recorded with sponsor, account/license, active-project, and event information. Sponsors do not receive those interaction records. Contact details are shared with a sponsor only when you submit an introduction request after seeing what will be shared and affirmatively consenting.
Website analytics
Cloudflare Web Analytics provides aggregated traffic and performance information, including page views, referrers, browser/device categories, and page-load measurements. Its analytics beacon does not use cookies or fingerprint individual visitors. Hosting and security providers also process network requests, including IP addresses and request metadata, to serve and protect the website. See Cloudflare Web Analytics.
Acquisition source
So we can understand which campaigns and referrers lead people to create an OrthoTruss™ account, we store a first-party record of how your visit arrived: the UTM campaign tags present in the link you followed and the host name of the referring website (for example, a search engine or social network — never the full referring address). This is kept for up to 90 days in a first-party cookie on the orthotruss.com domain and, if you go on to create an account, may be attached to that account so we know its acquisition source. It contains no third-party tracking identifier and is not shared with advertisers or data brokers. If your browser sends a Do Not Track signal, nothing is stored or forwarded.
Product-update lists
When you join a waitlist, we store your email address, selected product or topic, and signup timestamp. Our signup service runs on Vercel and stores records in Cloudflare R2 with restricted administrative access. Repeating a signup for the same email and topic updates that record. Joining a topic does not subscribe you to every other topic. Optional download-update opt-ins also record the selected platform, consent version, and latest opt-in time; marketing consent is separate from downloading.
Signup requests updates only. It does not purchase a product, reserve a place, or activate access. A successful submission is acknowledged on the page; it does not automatically send a confirmation email. Marketing emails provide an unsubscribe method. Confirming an unsubscribe removes your address from the product-update lists and retains a one-way address hash to honor the global marketing opt-out; submitting another signup does not override that opt-out. Purchase, license, security, and support messages are separate.
Simulator tools
The public biomechanics tools perform their core calculations in your browser. Loading the site, fetching research or public-data resources, and using any separately enabled connected feature can still make network requests. First Principles Designer is browser-local by default; its cloud research workspace is currently parked. This is not a promise that every page makes no requests or sets no storage. Do not enter patient-identifiable information into public simulators or research tools.
Clinical Platform: Studio and Practice Conductor
Core patient records and source imaging files are stored on practice-controlled hardware. Structured records and notes use application encryption; original imaging files depend on device-level protection. License and update requests do not include patient records. Where an available connected feature is configured or initiated, note drafting, messaging, payments, or explicit case sharing can transmit data. A practice must review the relevant provider terms, configuration, and required agreements before enabling a connection. A software acknowledgment is not itself a business associate agreement.
Explicit referral sharing sends an encrypted case package, recipient email, and case reference to the collaboration relay. The decryption key is carried in the sharing link; protect that link. Relay records are scheduled for removal after up to 90 days. For the individual connections and current availability, see Clinical Platform security and data flows. Contact your treating practice about its patient records; a website privacy request does not give us access to its local database.
The paid location-license design uses customer and subscription identifiers, treatment-address information, installation and database identifiers, and device fingerprints for licensing, transfer, security, and billing. Studio Advanced and Conductor Pro sales are currently paused. Joining their waitlist submits contact information, not clinical records.
Koinon Tax
Koinon Tax is in development for local tax preparation and planning. A product preview does not submit a return or upload your tax documents. Do not send tax identifiers, returns, bank details, or patient information through public website forms. Any future hosted or shared workflow must describe the information it sends before you use it.
Third-party services
| Provider | Purpose and information |
|---|---|
| Stripe | Payments, billing, tax, and subscription records. |
| Clerk | Pioneer hosted authentication, account identity, and sessions. |
| Keygen | License key, license identity and status, and the activated computer's device fingerprint, operating-system platform, and computer name for license validation and activation. |
| Anthropic | Prompts and selected context for requested Pioneer AI features. |
| Resend | Email addresses and transactional message contents. |
| Cloudflare & Vercel | Website and service hosting, network/security requests, downloads, analytics, and R2 storage of update-list records. |
| Supabase | Structured support and partner records, and the clinical collaboration relay. |
| Public-data services | Selected geography or site addresses for Census, NPPES-related data, geocoding, and Nominatim requests. |
| Practice-configured providers | Available clinical connections can use Google Gemini, an SMS provider, a practice’s mail server, or Stripe under the practice’s configuration and applicable agreements. |
Hosted Pioneer account and commerce records are held in its hosted database, separately from local planning data. OrthoTruss does not sell personal information or share it with data brokers. Information is shared with providers to deliver the Services, with a sponsor after an explicit introduction request, when required by law, or as part of a protected business transfer.
Data retention
Local data and exports remain under your control; uninstalling an app may leave its data behind. Deleting an original planning document does not necessarily remove values you applied to a plan or copies in backups. Hosted account closure, subscription cancellation, marketing unsubscribe, and local-file deletion are separate actions. Pioneer account sign-out lets you keep local recovery on that device or explicitly discard its account draft and recovery copies; keeping it leaves account content there. When Pioneer account closure completes, the hosted saved Roadmap and save records are removed; a local account draft remains read-only for recovery until you explicitly clear it on that device. Offline devices and files you already downloaded cannot be erased remotely. We retain account, purchase, tax, fraud-prevention, and license records for the relationship and any additional period needed for legal, accounting, security, or dispute purposes.
Product-update records currently have no automatic expiry. We retain them to provide the updates you requested until you unsubscribe, request deletion, or we discontinue the list. A marketing-suppression hash may be retained as long as reasonably necessary to honor an opt-out. You can unsubscribe or request deletion at any time.
Identifiable Pioneer support contact data is scheduled for anonymization 90 days after closure; deidentified structured support history may be retained for 12 additional months. Sponsor impression/click records and anonymous feature-interest events may be retained for up to 24 months; sponsor leads for up to 24 months after the last related activity. Clinical relay retention is described above. Provider retention and legally required records can differ from local-file retention.
Security
OrthoTruss uses administrative, technical, and organizational safeguards appropriate to the information processed, including encrypted transport and access controls. Portable backups use industry-standard encryption based on a passphrase you control. No system is completely secure. Protect your operating-system account, license key, recovery key, backup passphrase, and exported files.
Children's privacy
Our account, purchase, and professional planning services are intended for adults. Public education and guides do not require a child account. We do not knowingly collect children’s personal information through these website services. This does not describe a treating practice’s lawful handling of pediatric patient records in its clinical software.
Your privacy choices & California residents
Depending on applicable law, you may request access, correction, or deletion of centrally processed personal information. We may verify identity and retain information needed for transactions, fraud prevention, security, legal claims, or compliance. We aim to respond to verified requests within 45 days. OrthoTruss does not sell personal information.
Changes to this policy
We will change the effective date when this policy changes and provide additional notice when required.
Privacy questions
Privacy questions and verified requests: [email protected]
Jean-Marc E. Choufani, 701 Buckskin Dr, Round Rock, TX 78681