Privacy Policy

Last updated: March 20, 2026

BCI Management Group, LLC (“BCI,” “we,” “us,” or “our”) operates the Converge Connect mobile application (the “App”). This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password. You may optionally provide your phone number, institution or practice name, specialty, credentials, city, state, bio, and social media links (LinkedIn, Instagram). You choose what to share through privacy controls in the App’s Settings.

Event & Attendance Data

When you join an event, we store your registration, check-in status, and badge type (e.g., attendee, speaker, staff). This data is provided by event organizers and linked to your account when you register.

Lead Retrieval Data

If you participate in lead retrieval (scanning attendee badges), the scanned data — including name, credentials, specialty, institution, city, state, and NPI number — is stored as a lead record associated with your account and the event. Lead data is only accessible to authorized staff and the capturing organization.

User-Generated Content

Posts, comments, questions, and messages you create within the App are stored on our servers. Direct messages are only visible to conversation participants. Community posts are visible to other event attendees.

Photos

If you upload photos to the App (profile pictures, event photos, or message attachments), they are stored in our cloud storage. Event photos may be tagged with the names of people in them.

Device Information

We collect your device’s push notification token (via Firebase Cloud Messaging) to send you notifications about messages, announcements, and session reminders. You can disable notifications in the App’s Settings or your device settings at any time.

2. How We Use Your Information

• To provide and maintain the App’s features (event management, messaging, lead retrieval, session agendas)
• To display your profile to other event attendees, subject to your privacy settings
• To send push notifications you have opted into (messages, announcements, session reminders)
• To enable event organizers to manage attendees, check-ins, and lead retrieval
• To generate aggregated analytics for event organizers (no personally identifiable information is shared in analytics)
• To respond to your feedback, support requests, or reports of inappropriate content

3. Information Sharing

We do not sell your personal information. We share data only in these circumstances:

• Event organizers: Your name, credentials, badge type, and check-in status are visible to the event organizer.
• Lead retrieval: If your badge is scanned by an authorized lead retrieval user, the data encoded in your badge QR code is shared with that user’s organization. You can control what data appears by adjusting your privacy settings.
• Other attendees: Your name and credentials are visible in the attendee directory. Other profile details (email, phone, institution, specialty, bio, social links) are only shown if you enable them in your privacy settings.
• Service providers: We use Supabase (database and authentication, hosted on AWS), Firebase (push notifications), and Vercel (web hosting) to operate the App. These providers process data on our behalf under their respective privacy policies.
• Legal requirements: We may disclose information if required by law or to protect the rights, safety, or property of BCI, our users, or the public.

4. Your Privacy Controls

The App provides granular privacy controls in Settings. You can individually toggle the visibility of:

• Email address (hidden by default)
• Phone number (hidden by default)
• Institution / practice name
• Specialty
• Bio
• LinkedIn profile
• Instagram profile
• City and state

You can also set your entire profile to private, which hides all information except your name.

5. Data Retention

We retain your account data for as long as your account is active. Lead retrieval data is retained for the duration specified by the event organizer (typically 14 days after the event ends), after which access expires. Event data (sessions, speakers, sponsors) is retained for historical reference.

6. Account Deletion

You can delete your account at any time from the App’s Settings. Account deletion permanently removes your profile, personal data, and messages. Lead records you captured are retained but anonymized (your identity as the capturer is removed). To request deletion, you can also contact us at support@bcimgt.com.

7. Data Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), secure authentication (Supabase Auth with JWT tokens), and row-level security policies in our database. However, no method of electronic transmission or storage is 100% secure.

8. Children’s Privacy

The App is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy in the App and updating the “Last updated” date above.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

BCI Management Group, LLC

Email: support@bcimgt.com