Privacy Policy

Our Commitment to Your Privacy

The CAC Feedback Portal is designed with your privacy as the top priority. We use "blind authentication" to verify your employment while keeping your feedback completely anonymous.

What We Collect

• Your selected role (RBT, BCBA, or Admin) - This is voluntary and helps us understand feedback by department
• Feedback category - The topic area of your feedback
• Your feedback text - The content you submit
• Date only - We store only the date (YYYY-MM-DD), not the time, to prevent matching feedback to shift schedules

What We DO NOT Collect or Store

• Your name
• Your email address
• Your Microsoft account ID
• Your IP address (in the feedback database)
• Precise timestamps
• Any information that could identify you

How Authentication Works

We use Microsoft Single Sign-On (SSO) to verify that you work at CAC by checking your email domain. However, your identity is never stored with your feedback. The authentication only confirms you're a CAC employee - it doesn't connect your identity to what you submit.

Data Security

• All data is transmitted over encrypted HTTPS connections
• Our database provider maintains a Business Associate Agreement (BAA) for HIPAA compliance
• Access to feedback data is restricted to authorized personnel only
• We do not log feedback content in server logs or console outputs

Your Rights

Because your feedback is anonymous, we cannot identify or retrieve specific submissions you may have made. This is by design - it ensures your privacy is protected.