What we keep, and where.
In plain words, so you can answer the question when someone asks it. If anything here changes, this page changes first.
Last changed October 23, 2026 · Every change is listed in What’s new
About your business
- Its name, address, phone, hours and website
- Your logo and colors
- The services you offer, and your own words for the emails
- Your team: names and email addresses
About your people
- Names and email addresses
- Phone numbers, if you add them
- Who’s in their household
- Their services and visit dates
- How they answered your emails
Never
- Charts, notes or treatment details
- Diagnoses or insurance
- Card numbers (Stripe holds those)
- Anything you didn’t give us
How it’s looked after
No passwords to steal
You sign in with a link or a short code sent to your email. After several wrong codes, that address has to wait.
Encrypted on the way
Every page and every connection to Rebound uses HTTPS, the padlock in your browser.
Your business sees only its own
Every page checks which business you’re signed in to. Our tests try to reach another business’s people on every change, and must fail.
Everyone has their own sign-in
Changes are written down with who made them and when, and an owner can remove someone in one step.
Backed up every night
Encrypted at Amazon, in a second place. Our server can add a backup but never read or delete one, and every Sunday we put one back to prove it works.
Checked, not assumed
We review Rebound’s security as part of building it. The last full review was October 23, 2026.
Who helps us run it
SiteGround
Our servers, in the United States. Rebound and your data live here.
Amazon Web Services
Sends your emails from your own sending address, tells us about bounces and unsubscribes, and keeps our nightly backups. In the United States (Ohio).
Stripe
Takes payments. Your card details go to Stripe, never to us.
Zapier
Only if you connect your booking software: carries each finished appointment to Rebound (who came in, for what, and when). Nothing is sent back.
Anthropic
Reads your public website when you paste it, and answers questions in Ask Rebound, from counts only. Never used to train their models.
A privacy agreement for health businesses
Being written
Some health businesses need a signed privacy agreement (often called a BAA) with each company that handles their clients’ details. Ours is being written with an attorney now, and this line changes the day it’s ready. Until then, we’re glad to answer any question your own policy asks.
Yours to take, any time
Download everything, whenever you like. When you leave, we keep it 60 days in case you come back, then delete it for good.
Never sold, never shared
Your list is used for one thing: your emails. Unsubscribes work forever, even after you leave.
Questions about what we keep?
Write to us at hello@launchrebound.com. A person answers, usually the same day. Found a security problem? Tell us there too, and we’ll thank you by name if you’d like.
Every client, remembered.
Start with your website.