The short version
- We never see your patients' information. FastForward works inside your browser; patient data goes between your browser and Practice Fusion and never reaches our servers.
- We hold your email address, your password (hashed), your subscription status, the encounter templates you build, and a security log of your account's activity.
- No analytics, no tracking, no advertising, no cookies. We do not sell or share your information for marketing.
- Checkout and billing are run by Link, a Stripe service. Your card details go directly to it, and we never see them.
- Ask us to delete your account and we will.
This policy explains what FastForward Engineering LLC ("we", "us") collects when you use FastForward, why, and what you can do about it. It covers the FastForward browser extension and our website and servers.
1.The short answer on patient data
We do not receive, store, or transmit protected health information.
FastForward runs inside your Chrome browser. When it reads a note or writes into one, that information travels between your browser and Practice Fusion. It does not pass through us, and we have no way to see it.
Because we do not create, receive, maintain, or transmit protected health information on your behalf, we do not act as a business associate as that term is used under HIPAA.
2.What we collect
- Your email address
- Provided at checkout, which Link runs for us. Used to identify your account, sign you in, and send you account email.
- Your password, hashed
- Stored only as a bcrypt hash. We cannot read it or recover it for you.
- Subscription status
- A Stripe customer reference and whether your subscription is active. Card details are held by Stripe, not by us.
- Your encounter templates and settings
- The diagnosis sets, note templates, and preferences you create. Stored so they follow you between computers. These are yours to author, and you should not put patient-identifying information into them. They include your favorite diagnosis codes, and a list of the 100 diagnosis codes you most recently entered with Set encounter or Stage encounter. That list holds the codes alone, in order — no patient, date, note or encounter is stored with them — and, like the rest of your templates and settings, it is encrypted before it reaches us.
- Your acceptance of our Terms
- When you set your password, we record which version of the Terms you accepted, the date and time, your IP address, and your browser's user-agent string. We keep this as evidence of agreement.
- Your account activity
- A security record of what happens on your account: sign-ins and sign-outs (including failed attempts), password changes, changes to your encounter templates and why they changed (an edit, a deletion or an import), saving them to a file, and each use of Set encounter or Copy Previous Encounter. Each entry holds the date and time, the IP address it came from, and a few fixed details — which of your encounter types was used, which sections were copied, how many templates were saved. It never contains your email address, your password, the text of your templates, or anything from a patient record. Many clinics' compliance programmes expect their software vendors to keep such a record, and it lets us investigate a problem with your account if one arises. It is not used for analytics.
- Server logs
- Our web server keeps no access logs — it records only certificate and maintenance events, which contain nothing about you. Our application records operational events for troubleshooting, kept for about 30 days, which can include an internal account number and error details, but never your email address, your password, or anything from a patient record.
3.What we do not collect
- Patient information of any kind.
- Payment card numbers — these go directly to Link.
- Your billing address. Link collects it at checkout to work out sales tax. It is included in the payment notifications Stripe sends our server, but we do not store it.
- Analytics, usage tracking, behavioural profiling, or advertising identifiers. FastForward contains no analytics or telemetry of any kind.
- Cookies. FastForward does not set them, and our password pages do not use them.
- Your Practice Fusion credentials. You sign into Practice Fusion yourself; FastForward never sees that password.
4.What stays on your own computer
Some information is stored by Chrome on your machine and is never sent to us: your sign-in token, a local copy of your encounter templates, cached configuration used to operate the extension, and some preferences such as the encounter type and date you last selected.
Your last-selected encounter type is stored using Chrome's synced storage, which means Chrome may sync it to your Google account if you have Chrome sync enabled. That is Chrome's mechanism, not ours, and it carries no patient information — only which encounter type you picked. The date you last selected stays on your computer.
Signing out, or removing the extension, clears the copy held on your computer.
5.Other services involved
- Stripe and Link
- Your subscription is sold through Link, a Stripe service that acts as the merchant of record. Link runs checkout and receives your email address, billing address and payment details directly. It calculates and remits sales tax, sends your receipts and billing email, and handles billing support and refunds. You can view, update or cancel your subscription from your Link account. Stripe and Link handle this information under their own privacy policies.
- Resend
- Delivers our account email — the welcome message and password resets. Receives your email address and the message content.
- DigitalOcean
- Hosts our server.
- The U.S. National Library of Medicine
- When you use the diagnosis-code search inside FastForward, the text you type is sent from your browser to a public search service operated by the National Library of Medicine (part of the U.S. National Institutes of Health) to look up matching ICD-10 codes. To show a code's description, FastForward sends the code itself to the same service in the same way. The request goes directly from your browser; it does not pass through us, and we do not see or record what you searched for. Do not type patient-identifying information into that box.
We do not sell your information, and we do not share it for anyone's marketing.
6.Why we use it
To provide FastForward: signing you in, checking your subscription is active, and storing the templates you build so they are available on any computer you use. To send you account email. To keep a record of your agreement to our Terms. To keep the service secure and working, including limiting repeated failed sign-in attempts and keeping the account activity record described in section 2.
We do not use your information for any purpose unrelated to running FastForward.
7.Security
Passwords are stored only as hashes. Password-reset and set-password links are stored as hashes too, so reading our database would not yield a usable link. Once you sign in with the current version of FastForward, your encounter templates and settings, including your recent and favorite diagnosis codes, are encrypted in your browser, with a key derived from your password, before they are sent to us; we store only the encrypted copy and do not store the key, so we cannot read them. That also means we cannot recover them if you forget your password and none of your computers can unlock them — keep a copy of your encounter types with Save types.... All traffic between your browser and our servers uses TLS. Only one sign-in session per account is active at a time — signing in on a second device ends the first.
No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your information we will notify you as required by law.
8.How long we keep it
We keep your account information until you ask us to delete it. Cancelling your subscription stops billing and ends your access; it does not by itself erase your account, so that your templates are still there if you come back.
Email us and we will delete your account, your encounter templates and your settings. Some records may persist for a period in backups, and we may retain what we must for legal, tax, or accounting purposes — including a record of your acceptance of the Terms.
We keep your account activity record for six years from each entry, including after your account is deleted, because it may be needed to answer a security or compliance question about the period you used FastForward.
9.Your choices
You can ask us what we hold about you, ask us to correct it, or ask us to delete it, by emailing the address below. You can cancel your subscription at any time. You can remove the extension from Chrome at any time, which clears what is stored on your computer.
Deleting your data with Link does not delete your FastForward account. If you ask Link to delete your payment information, Link cancels your subscription and deletes its own records, but your FastForward account and templates stay with us until you ask us to delete them.
10.Children
FastForward is a professional tool for clinicians. It is not directed to children and we do not knowingly collect information from anyone under 18.
11.Changes to this policy
If we change this policy we will update the version and effective date above, and where the change is material we will email the address on your account. Continuing to use FastForward after a change takes effect means you accept the updated policy.