CFExclusion Powered by C.F.A.I.

Privacy

Last updated: September 16, 2026

This policy covers CFExclusion, operated by CFAISolutions LLC. It explains what information CFExclusion collects, how it's used, and how it's protected. It's written in plain language on purpose.

The short version: CFExclusion collects only what's needed to run your search, generate your report, or operate your Monthly Screening subscription; uses it only for that purpose and to report results back to you; never sells it; and does not collect Social Security numbers.

1. What CFExclusion collects

What CFExclusion collects depends on how you use the service:

  • A free search — the name, organization, NPI, or state you search for. The query text itself and your IP address are never stored in the clear; both are one-way hashed before being logged (see "How search activity is protected" below).
  • Email signup (to raise your daily free-search limit) — your email address, stored in the clear, plus a signup/confirmation timestamp.
  • A paid report — the query you searched and the resulting report content, which is stored in the clear because it is the deliverable you paid for.
  • A Monthly Screening subscription — your business contact details (practice name, your name, email, phone); for each person you ask CFExclusion to screen: full name, date of birth, NPI, and role; for each vendor you ask CFExclusion to screen: business name, EIN, NPI, and contact name.

CFExclusion does not collect or request Social Security numbers for any of the above. (Any future or premium tier involving additional identifiers would be offered under its own terms and additional safeguards.)

2. How CFExclusion uses it

Your information is used solely to: run the search or produce the report you requested; enforce the free-tier daily search limit and detect abuse; re-screen your roster on your recurring schedule if you subscribe to Monthly Screening; and communicate with you about your service. That's it.

3. What CFExclusion does NOT do

  • CFExclusion does not sell, rent, or trade your information to anyone.
  • CFExclusion does not use your search activity or roster for any purpose other than the screening and reporting described above.
  • CFExclusion does not share your information with third parties except as needed to run the service (for example, Stripe for payment processing, or secure infrastructure providers) or where required by law.

4. How it's stored and protected

CFExclusion stores your information securely and limits access to what's needed to provide the service. The exclusion lists CFExclusion screens against are drawn from public government sources; any roster information you provide as a Monthly Screening subscriber is treated as confidential to your account and is not publicly accessible.

5. How search activity is protected

CFExclusion never stores the raw text of a search or a raw IP address. Both are one-way hashed (HMAC-SHA256 with a private salt) before being written to our request log, solely to enforce the daily free-search limit and to detect abuse. The same hashing applies everywhere else an IP address is touched on this site — the per-IP rate limit and the free-search daily counter both key off the hash, never the address itself. If you sign up by email, we store that email address in the clear (so we can send the confirmation link and, later, honor an unsubscribe) along with a signup/confirmation timestamp. Your IP address at signup is stored only as the same one-way hash described above, never in the clear. We never sell or share your email address. A paid report stores the query you searched and the resulting report content — that's the deliverable you paid for and is necessarily in the clear, since the report exists to state the record's contents.

6. Recordkeeping — why prior versions are retained

CFExclusion retains the reports it generates and, for Monthly Screening subscribers, prior versions of the roster when it changes. This is deliberate: it creates a dated, accurate record of exactly what was submitted and what was screened for each cycle — which protects both you and CFExclusion by documenting the service actually performed. Superseded roster entries are marked as inactive rather than deleted, so the record of what was screened, and when, remains intact.

7. How long it's kept

CFExclusion retains report and roster history for as long as you're an active client, and as needed afterward for legitimate business and recordkeeping purposes. If you cancel a Monthly Screening subscription, you may request deletion of your roster information; CFExclusion may retain records of screening reports and submission history as needed to document the service that was provided.

8. Your choices

You decide what information to provide. Some fields (like date of birth, for Monthly Screening) are optional but improve screening accuracy. You may request access to, or correction of, the information you've submitted by contacting CFExclusion directly. Corrections are added as a new, dated version; prior versions are retained as part of the screening record.

9. Changes to this policy

CFExclusion may update this policy. The "last updated" date above reflects the current version.

10. Corrections and removal

Email info@cfaisolutions.com with the page URL and what's wrong, or to request removal of anything you believe this policy doesn't account for. We aim to respond within 5 business days.