1. Scope and contracts
These terms describe GoldRock’s standard handling of business account and eligibility information. A separately executed data-processing agreement or other signed contract controls conflicting terms. The organization’s and GoldRock’s legal roles depend on the actual service and data involved; this page is not an executed BAA, certification or conclusion that a particular law does not apply.
2. Permitted administrative information
Use account identifiers, names, verified contact addresses, employment eligibility, organization roles, invitation records and billing identifiers only as needed for authentication, eligibility, billing, security and support. Do not include medical documents, case narratives, diagnoses or insurance-claim detail in roster fields, organization names, invitations or support requests.
3. Private medical workspace
The standard medical-document workflow uses local processing, with optional encrypted device-local saving. Employer administrators cannot view private employee cases through the benefit. Identifier detection can miss information; no deidentification or complete-removal guarantee is made. Exports and files deliberately shared elsewhere create separate copies. A new cloud medical-content path requires a separate review and disclosure before activation.
4. Providers and security
Clerk supports authentication, Vercel hosts the service and Neon provides the account database. Other feature providers are described in the Privacy notice. We use access controls, verified identity and encrypted account fields as described there. Server account-data encryption is not end-to-end encryption against the service operator. Organizations must secure their own administrator accounts, eligibility sources and systems.
5. Rights and deletion
Organizations should direct employee requests about their own employment records to the responsible employer. GoldRock handles requests concerning information it controls and verifies the requester’s identity and authority. Contact ryan@moonshineai.com without attaching medical records or identity documents initially. Account deletion can require ownership transfer, subscription handling and provider cleanup. Backups, mandatory payment records and legal holds have separate retention requirements; deletion is not a guarantee of immediate physical removal from every provider copy.
6. Incidents
Report suspected unauthorized access promptly using the contact above. Include a general description and a way to contact you; do not include credentials or medical documents in the initial report. We investigate, contain and provide notices required by the applicable facts, law and executed contract. These terms do not replace a business-specific security or breach-notification agreement.
7. Retention and ending service
Administrative records are retained only for the purposes and obligations described in the Privacy notice and any executed agreement. Local documents are controlled by the member’s device and deliberate exports. Ending the employer contract does not grant the employer access to or a copy of employee cases. Contract-specific export, retention, subprocessor and security requirements must be agreed in the signed order or data addendum.