Privacy Policy

Effective July 2, 2026

RegistryReach is a HubSpot application operated by Facets Novum, L.L.C. ("RegistryReach," "we," "us"). This policy explains what data we handle when you install and use the app, and how we protect it. By installing RegistryReach, you agree to this policy.

The short version: RegistryReach works with public business and professional information about healthcare providers, drawn from the U.S. national provider registry and publicly available business listings. We do not collect, process, or store patient health information.

1. What RegistryReach does

When you enrich a contact, RegistryReach matches that contact against public provider registry data and returns professional details such as National Provider Identifier (NPI), specialty, practice address, and practice phone. It then writes those fields back to your HubSpot contact record.

2. Data we process

Connection data. When you install the app, HubSpot provides an OAuth access token and your portal identifier so RegistryReach can read and update the contacts you choose to enrich.
Contact match inputs. To find the right provider, we use the fields you send us for a given contact, typically name, and where available, state and any existing NPI. We use these only to perform the match.
Registry and business data. The information we return comes from public sources, primarily the national provider registry (NPPES) and publicly available business listings.
Usage and billing data. We record enrichment counts per portal to meter your plan, and we process subscription and payment information through our payment provider.

3. What we do not process

RegistryReach does not handle patient health information, clinical records, or protected health information of any kind. The data we work with is professional and business information about providers that is already public.

4. How we use data

We use the data above only to provide the service: to connect to your HubSpot portal, match and enrich the contacts you select, meter usage against your plan, bill your subscription, and provide support. We do not sell your data, and we do not use it for advertising.

5. Service providers

We rely on a small set of providers to run RegistryReach:

HubSpot: the platform the app runs in and the source and destination of your contact records.
Stripe: subscription billing and payment processing. Card details are handled by Stripe, not by us.
Our hosting provider: secure servers where the application and its data run.

6. Security

Connections to RegistryReach use TLS encryption. Access tokens are stored server side with restricted access, and requests from HubSpot are cryptographically verified before we act on them. We limit access to production systems to what is needed to operate the service.

7. Retention

We keep your connection token for as long as the app is installed. When you uninstall RegistryReach, its access is revoked. We retain usage and billing records as needed for accounting and legal obligations.

8. Your choices

You can disconnect RegistryReach at any time by uninstalling it from your HubSpot account, which ends our access to your portal. To ask about the data associated with your account, or to request deletion of records we control, send us a message through the feedback form.

9. Changes

We may update this policy as the service evolves. When we make material changes, we will revise the effective date above and, where appropriate, notify you.

10. Contact

Questions about this policy? Send us a message. Written privacy inquiries and data requests can also be directed to [email protected].