Privacy Policy
Effective Date: April 1, 2026 · Last Revised: April 22, 2026
BxCircle ("we," "us," or "our") operates the BxCircle platform (the "Platform"), a professional community for Applied Behavior Analysis practitioners. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform. Please read this policy carefully. By using BxCircle, you consent to the practices described herein.
1. Information We Collect
Information you provide directly:
- Account registration data: name, email address, password
- Professional profile: credentials (RBT, BCaBA, BCBA, BCBA-D), certification numbers, work setting, specializations, location
- Content you create: posts, comments, messages, group discussions, resource uploads
- Job-related data: resumes, applications, employer profiles, salary information
- Communication preferences and notification settings
Information collected automatically:
- Device information: browser type, operating system, device identifiers
- Usage data: pages visited, features used, interaction patterns, timestamps
- Log data: IP address, access times, referring URLs
- Performance data: page load times, error logs
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Platform and its features
- Personalize your experience, including feed content and job recommendations
- Facilitate community features: groups, messaging, mentorship matching, supervision tracking
- Process job applications and connect employers with candidates
- Send notifications, updates, and service-related communications
- Verify professional credentials (BACB certification status)
- Analyze usage patterns to improve Platform design and functionality
- Detect, prevent, and address technical issues, fraud, or security threats
- Comply with legal obligations
4. Protected Health Information (PHI)
BxCircle does not collect, store, or process Protected Health Information (PHI).
Users are strictly prohibited from sharing any client-identifying information on the Platform. This includes names, locations, physical descriptions, dates of service, diagnosis information, or any combination of details that could reasonably identify a client receiving behavioral services.
BxCircle is not a covered entity under HIPAA. However, we enforce strict content policies to protect client confidentiality. Content that appears to contain PHI will be immediately removed, and the posting user's account may be suspended or terminated.
6. Data Retention
We retain your information for as long as your account is active or as needed to provide services. Specific retention periods:
- Account data: Retained until you delete your account, plus 30 days for backup recovery
- Posts and content: Retained until deleted by you or removed for policy violations
- Stories and reels: Automatically deleted after 24 hours
- Messages: Retained until deleted by participants or account deletion
- Usage logs: Retained for 12 months, then anonymized
- Job applications: Retained for 6 months after the position is filled
When you delete your account, we will remove your personal data within 30 days. Some anonymized data may be retained for analytical purposes.
7. Data Security
We implement industry-standard security measures to protect your personal information, including TLS encryption for data in transit, encrypted storage for sensitive data at rest, regular security audits, and access controls limiting employee access to user data. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a security breach, we will notify affected users in accordance with applicable law.
8. Your Rights
Regardless of your location, you have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your account and associated data
- Portability: Request export of your data in a machine-readable format
- Opt-out: Unsubscribe from non-essential communications at any time
- Restriction: Request that we limit processing of your data in certain circumstances
- Objection: Object to processing of your data for specific purposes
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
9. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you
- Right to Delete: You may request deletion of your personal information, subject to certain exceptions
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
- Right to Opt-Out of Sale: We do not sell personal information. If this changes, we will provide a "Do Not Sell My Personal Information" link
To submit a CCPA request, email [email protected] with the subject line "CCPA Request." We will verify your identity before processing any request.
10. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):
- Legal Basis: We process your data based on consent (account creation), contract performance (providing the service), legitimate interest (analytics, security), and legal obligation
- Data Transfers: Your data may be transferred to and processed in the United States. We use appropriate safeguards (Standard Contractual Clauses) to protect your data during transfer
- Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority
- Data Protection Officer: For GDPR-related inquiries, contact our DPO at [email protected]
11. Children's Privacy
BxCircle is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us at [email protected].
12. Third-Party Services
We may use third-party services for hosting, analytics, email delivery, and push notifications. These services have their own privacy policies, and we encourage you to review them. We do not share your personal information with third parties for their marketing purposes. The Platform may contain links to external websites; we are not responsible for the privacy practices of those sites.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes through the Platform or via email at least 30 days before the changes take effect. Your continued use of BxCircle after the effective date constitutes acceptance of the updated policy. We encourage you to review this policy periodically.
14. Contact Us
For privacy-related questions, data requests, or concerns:
Email: [email protected]
DPO (GDPR): [email protected]
CCPA Requests: [email protected] (Subject: "CCPA Request")