Privacy Policy

Last updated: August 2026 · Contact: admin@nexlookup.cc

Important: NexLookup is designed so that protected health information (PHI) is not required to use our tools. Do not upload patient charts, claims with patient identifiers, or other PHI.

1. Who we are

NexLookup (“we”, “us”) operates the website at nexlookup.cc and related services providing medical coding and provider lookup tools. For privacy questions, email admin@nexlookup.cc.

2. Information we collect

Account information

If you register, we may store username, email address, password hash (not plain-text passwords), optional profile name, and subscription/billing status.

Usage data

We may store search queries you run while logged in (e.g. code lookups), favorites, saved rosters of provider NPIs (public identifiers), and basic server logs (IP address, timestamps, pages requested) for security and reliability.

Payment data

If you subscribe, payment card details are processed by our payment provider (e.g. Stripe) when configured. We store plan type, status, period dates, and payment history amounts — not full card numbers.

What we do not collect

Patient names, medical record numbers, or clinical notes
Full claim files with patient demographics
Social Security numbers or government ID numbers of patients

NPI lookups use the public CMS NPPES registry. Provider data returned by CMS is public professional information, not patient PHI.

3. How we use information

To provide lookup tools, accounts, and paid features you request
To operate billing, trials, and customer support
To maintain security, prevent abuse, and improve performance
To communicate service notices related to your account

We do not sell personal information.

4. Cookies and similar technologies

We use session cookies necessary for login and security (e.g. CSRF protection). If analytics or advertising (such as Google AdSense) is enabled on your deployment, those third parties may set their own cookies subject to their policies.

5. Sharing of information

We may share data with:

Infrastructure providers (hosting, email delivery) under contract
Payment processors for subscriptions
Authorities when required by law

Public API responses contain code descriptions or public NPI registry fields only.

6. Data retention

Account data is retained while your account is active. You may request deletion by contacting admin@nexlookup.cc. Server logs are retained for a limited period for security. Cached public NPI responses may be stored briefly to improve performance.

7. Security

We use industry-standard measures such as password hashing, HTTPS in production, and access controls on administrative functions. No method of transmission or storage is 100% secure.

8. Children’s privacy

The service is intended for professional adults. We do not knowingly collect personal information from children under 13.

9. International users

The service may be hosted in the United States. By using NexLookup you understand your information may be processed in the U.S. or other locations where our providers operate.

10. Your choices

Access or update profile information from your account settings
Cancel a subscription from the billing page
Request account or data deletion via email

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use after changes constitutes acceptance of the revised policy.

12. Contact

Privacy and data requests:
Email: admin@nexlookup.cc
Website: Contact form