Effective September 4, 2026
CredentialedMD privacy notice
CredentialedMD is a service of AB Web Solutions in Illinois. We collect only the business and public professional information needed to sell, build, review, host, and maintain a physician portfolio website. CredentialedMD is not a patient portal, clinical system, or medical-record service.
Information we collect
We may collect your name, professional email, phone number, specialty, practice and role, billing status, website goals, domain preference, public professional materials, approved imagery, source links, revision requests, and service correspondence. Stripe processes payment-card and billing information; we do not receive full card numbers.
Information you must not provide
Do not submit patient names, patient contact information, medical records, clinical notes, images of patients, insurance information, private messages, private credentialing documents, passwords, or any protected health information. If restricted information is submitted accidentally, stop using the workflow and contact us so it can be isolated and removed.
How information is used
We use submitted information to verify a paid order; communicate about the project; review sources; draft, stage, approve, launch, and maintain the website; deliver form notices; manage billing; prevent abuse; and meet legal, accounting, and security obligations.
Technical information
Our hosting, security, and payment providers may process an IP address, browser type, device information, request time, referring page, and security logs when someone uses the service. We use this information to operate the site, prevent abuse, and diagnose problems. We do not sell personal information.
Service providers
The launch architecture uses Stripe for checkout and subscription billing, Railway for hosting and server functions, and Resend for operational email delivery. Domain registrars, DNS providers, analytics, and other services are added only when selected for the specific deployment. Each provider handles data under its own terms and privacy practices.
Publication and professional sources
Information approved for the physician website becomes public after launch. Public registry and professional-source information is treated as evidence for review, not automatic permission to publish every available field. The physician approves final public content.
Retention and deletion
Active-client materials are retained while the service is active. Working source files may be removed 90 days after launch or cancellation when they are no longer needed. Project and support records may be retained for up to 24 months after termination. Billing, tax, fraud-prevention, and legal records may be retained for up to seven years or as otherwise required by law. Information can be deleted earlier on verified request when no legal, accounting, security, or dispute hold applies.
Security
We use access controls, encrypted transport, environment-managed credentials, noindex staging, and limited service-provider access appropriate to this workflow. No internet service can promise absolute security. Do not use the service for restricted clinical information.
Your choices
You may request access, correction, export, or deletion of project information, and may manage future subscription renewals through the Stripe customer portal. Some transaction and legal records may need to be retained.
Children and location
The service is intended for physicians and authorized business purchasers who are at least 18 years old. Information may be processed in the United States and in other locations where our service providers operate.
Changes to this notice
We may update this notice when the service or its providers change. The effective date at the top identifies the current version. Material changes will be posted before they take effect when practical.
Contact
CredentialedMD is a service of AB Web Solutions in Illinois. Submit privacy requests through the secure project reply path or the website inquiry form. We may verify the requester's identity before releasing, changing, or deleting information.