Privacy policy
Draft for review. This policy has not yet been reviewed by counsel and may change before launch.
Who we are
Credentialing Scorecard (credentialing.software) is operated by Metolius Health (“we”, “us”).
The short version
- You can read this site without giving us any personal information.
- If you leave a review, we store what you write, an anonymous device identifier and a scrambled (hashed) version of your IP address. We never store or show your raw IP address, and the hash is kept only as long as needed for rate limiting.
- Reviews are screened by an AI model before they’re published; uncertain ones go to a person.
- If you contact us as a vendor, we keep your name, role, work email and message so we can reply.
- If you follow a link to Metolius Health’ own website, you leave this site, and that site’s policies apply there.
What we collect
When you browse. Our host, Cloudflare, processes technical data needed to deliver and protect the site, such as IP address, browser type and the pages requested.
When you leave a review
| We store | Why | Shown publicly? |
|---|---|---|
| Your rating (1 to 5) and review text (20 to 2,000 characters) | To publish your review | Yes, if approved |
| Display name (optional, up to 60 characters) | To attribute your review as you choose | Yes, if you provide one; otherwise “Anonymous” |
| Role (optional, up to 80 characters) | To give readers context | Yes, if you provide one |
| The vendor you reviewed | To show the review on the right profile | Yes |
| An anonymous device identifier | To limit repeat submissions and spam | No |
| A one-way hash of your IP address, combined with a secret value | To rate-limit submissions. It is designed so it can’t practically be turned back into your IP address | No. Kept only as long as needed for rate limiting |
| Whether you passed the Cloudflare Turnstile check | To block automated spam | No |
| The moderation result (approve, spam or uncertain), the reasons given, the model used and the time | To audit moderation decisions | No |
| When you submitted and when it was moderated and approved | Record-keeping and display (“Approved on …”) | Approval date only |
We do not ask for your email address, and we don’t link a review to your identity. Please don’t put personal details, patient information or contact details in a review.
How reviews are moderated. When you submit a review, its text is sent to an AI model provided by Anthropic, which returns a verdict: approve, spam or uncertain. Approved reviews are published. Spam is hidden. Uncertain reviews wait for a person at Metolius Health to decide.
When you book a discovery call. The calendar on our Book a call page is provided by Welaka, the scheduling service Metolius Health uses. Opening that page loads the calendar from Welaka, which receives technical data such as your IP address and browser type. If you book, the details you enter and the time you choose go to Metolius Health so it can hold the call. Booking has no effect on any listing or score.
Security checks (Cloudflare Turnstile). Our review and vendor forms, and the booking calendar, use Cloudflare Turnstile to tell people from bots. Turnstile processes information about your browser and device to do this. See Cloudflare’s privacy policy.
When you contact us as a vendor. We keep your name, role, company, work email, your message and any source links, so we can check your request and reply.
Where it’s stored
Review and vendor-form data is stored in a database hosted by Supabase. The site and its forms run on Cloudflare. Discovery-call bookings are held in Welaka for Metolius Health.
How long we keep it
- IP hashes: kept only as long as needed for rate limiting.
Cookies and similar storage
Turnstile may use browser storage to run its check. The review form may use an anonymous device identifier.
Health information
This site is not a healthcare provider and does not handle patient records. Please don’t submit patient information in a review or a message; if you do, we will delete it.
Your choices and rights
You can ask us to delete a review you wrote. Because reviews are anonymous, we may ask you to identify it (the vendor, the date and the text) and may not be able to confirm it is yours.
Children
This site is for professionals and is not directed to children under 13.
Changes
We’ll post any change here with a new “last updated” date.
Contact
For privacy questions, contact Metolius Health, which operates this site.