CMEWizard.io (“CME Wizard”, “we”, “us”) is run by Viv Web Solutions, 240 Elm St. Floor 2, Somerville, MA 02143. This policy explains what we collect when you use cmewizard.io, why we collect it, who can see it, and what you can do about it.
The short version: we collect what we need to run your account and improve the site. We do not sell your data. Your reviews are shown only as widely as you choose.
What we collect
Things you give us
- Account details. Your name, email address, password (stored as a hash, never in plain text) and your account type: clinician, course provider or employer. If you fill them in: a profile photo, your professional experience and your notification settings.
- NPI and state registration numbers. Optional. We store them so we can offer credit syncing later. Today they are not used for any integration and are not shared with anyone. If that changes, we will update this policy and tell you before we use them.
- Specialty preferences. The specialties, credit types, MOC credit types, boards, providers and activity types you pick so we can show relevant CME first.
- Saved searches. The filter combinations you save, and whether you want email alerts when new activities match.
- Bookmarks and collections. Activities you save and the lists you file them in. A collection can be private or public. Public collections show your name.
- Completions and certificates. Activities you mark as completed, the renewal dates you enter, custom CME you add by hand, and any certificate files you upload.
- Reviews and ratings. What you write about an activity, your star rating, and the visibility you set for it.
- Messages. Anything you send through our forms: contact and support requests, questions about a specific course, pricing requests, partner and employer inquiries, problem reports and waitlist sign-ups.
- Social login. If you sign in with Google or Facebook, we receive your name, email address and profile picture from them. We never see your password for those services and we do not post on your behalf.
Things we collect automatically
- Usage analytics. Pages you view, search terms you type, filters you change, buttons you click, your device and browser type, and a rough location from your IP address. We use PostHog for this. On the live site we also load Google Tag Manager, which runs [GOOGLE TAGS: list the Google tags that fire on production, and say whether session recording is on].
- Server logs. IP address, time of request, page requested and browser type. We keep these for security and to fix problems.
- Cookies. See “Cookies” below.
Why we use it
- To run your account. Sign you in, keep your preferences, send the alerts you asked for.
- To show relevant CME. Rank and filter activities by your specialties and preferences.
- To track your CME. Keep your completions, credits and certificates in one place and build your transcript.
- To answer you. Reply to inquiries and support requests, and pass a course or pricing question to the provider you asked about.
- To improve the site. See which searches and filters people use, find bugs and measure what works.
- To keep the site safe. Detect abuse, automated scraping and fraud.
- To meet legal duties. Keep records the law requires and respond to lawful requests.
Under EU and UK law, our legal bases are: performing our agreement with you (your account and the features you use), our legitimate interests (improving and securing the site), your consent (analytics cookies where consent is required, marketing email) and legal obligations.
- Transactional email. Email confirmation, password reset, saved-search alerts and replies to your inquiries. These are part of the service, so you get them while you have an account.
- Updates and newsletters. Only if you opt in. Every one has an unsubscribe link.
We send email with MailPoet [SENDING SERVICE: from our own domain / through a named sending service].
Cookies
We use two kinds of cookies:
- Essential cookies keep you signed in, remember your cookie choice and protect the site from abuse. The site does not work without them.
- Analytics cookies help us measure how the site is used (PostHog and, on the live site, Google Tag Manager).
If you visit from the EU, UK or Switzerland you will see a consent banner. Non-essential cookies stay off until you accept, and you can change your choice later from the “Cookie Settings” link. Elsewhere, analytics runs by default; you can block it in your browser or with a tracker-blocking extension.
Our full cookie notice is at the end of this page.
Who can see your data
We do not sell personal data. We do not show ads. We share data only in these cases:
- The party you contact. When you send a question to a course provider or an employer through one of our forms, they receive your message and your contact details so they can reply.
- Reviews and ratings. Shown according to the visibility you choose: provider only, signed-in users, or everyone. You can post anonymously; other users then do not see your name, but we still know who wrote the review.
- Public collections. Visible to anyone with the link, with your name.
- Service providers who work for us. Hosting (WP Engine), analytics (PostHog and Google), email delivery ([SENDING SERVICE]) and social login (Google and Facebook, only if you use it). They process data under contract and only on our instructions.
- Legal reasons. When the law requires it, or to protect our users, the site or our rights.
- A change of ownership. If we merge with or are bought by another company, your data moves with the service. We would tell you before that happens.
Course providers never receive your NPI, your state registration numbers or your completion records from us.
How long we keep it
- Account data: while your account is open.
- When you delete your account (Profile, then “Delete account”): we delete your profile, preferences, saved searches, bookmarks, collections, completions, uploaded certificates and reviews. Copies in our backups roll off within 30 days.
- Form submissions: kept for 2 years so we can follow up and keep a record of the request.
- Analytics and server logs: kept for up to 12 months, then deleted or reduced to aggregate numbers.
Your choices and rights
- See and change your data on your Profile, Preferences, Collections and Learning Hub pages.
- Download your CME transcript as a PDF from the Learning Hub.
- Delete your account yourself from your Profile page. No email needed.
- Stop email alerts by editing the saved search, or with the unsubscribe link in the email.
- Anything else (a copy of your data, a correction, deletion, restriction, objection or transfer to another service): write to privacy@cmewizard.io. We answer within 30 days, or sooner if your local law requires it.
If you are in the EU, UK or Switzerland, you also have the right to complain to your data protection authority.
If you are in California, we do not sell your personal information or share it for cross-context advertising. You have the right to know what we hold, to delete it, to correct it, and not to be treated differently for using those rights. Use privacy@cmewizard.io.
Security
Passwords are hashed, the site runs over HTTPS, and access to personal data is limited to the people who need it. No system is perfectly secure. If you think your account has been misused, tell us at privacy@cmewizard.io.
Professional use only
CME Wizard is for licensed clinicians and healthcare professionals in training. It is not for anyone under 18. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it.
Where your data is processed
Our servers are in the United States. If you use the site from another country, your data is transferred to and processed in the US. Where EU or UK law requires it, we rely on the European Commission’s standard contractual clauses (or the UK equivalent) with our service providers.
Changes to this policy
We will post changes here and update the date at the top of the page. For changes that affect your rights in a meaningful way, we will email account holders first.
Contact
Viv Web Solutions
240 Elm St. Floor 2, Somerville, MA 02143
Privacy questions: privacy@cmewizard.io
Everything else: support@cmewizard.io or the contact form on our homepage.
Cookie notice
We use cookies to run this site and, with your consent, to analyze traffic and improve your experience. Non-essential cookies stay off until you accept. You can accept, decline or choose your preferences.
Essential: sign-in session, security tokens, your cookie choice. Analytics: PostHog and, on the live site, Google Tag Manager. We do not use advertising cookies. See “Cookies” above for how to change your choice.
