Privacy Policy

This policy explains what information TESSA collects when you use TESSA Field Notes, how we use it, and the choices you have. It applies to the TESSA website and web application at tessabiomed.com.

Account information. Your name, work email, company name, role, and optional phone number, provided when you create an account.

Service data. The content you enter into service sessions: equipment manufacturer, model, serial and asset numbers, issue and action tags, notes, labor time, photos you capture, and the generated reports.

Company data. Workspace membership, company branding you upload such as a logo, and the attribution of reports to the technician who created them.

Technical data. Standard log information such as authentication events and error diagnostics needed to operate and secure the service.

We use your information to provide the service: authenticating your account, saving and generating service reports, linking reports to device history, exporting and emailing documents you request, and providing support. We also use aggregated, de-identified information to improve product quality and reliability.

We do not sell your personal information, and we do not use it for third-party advertising.

TESSA uses third-party AI providers to generate report narratives, read equipment labels from photos, and produce summaries. The content you submit in a session — including notes and images — is sent to those providers to produce the output you requested. We do not authorize these providers to use your content to train their public models. AI output is assistive and must be reviewed by qualified personnel before use.

TESSA is intended for documenting equipment service, not patient care. Do not enter protected health information, patient identifiers, or patient images into service sessions, notes, or photos. TESSA is not offered as a HIPAA-covered service for TESSA Field Notes accounts.

Your service data is visible to members of your company workspace, including administrators. We share information with service providers who operate our infrastructure — hosting, database and file storage, email delivery, and AI processing — solely to deliver the service. We may disclose information where required by law or to protect the rights and safety of users and the service.

Data is stored on managed cloud infrastructure with encryption in transit. Access is restricted by row-level security policies scoped to your account and company workspace. Exported report links are time-limited and expire automatically. No system is perfectly secure, but we work to protect your data against unauthorized access, alteration, and loss.

We retain service data for as long as your account is active. Archived reports are retained for 30 days before permanent deletion. You may request deletion of your account and associated data at any time by emailing us.

You can view and edit your account details in Settings, edit or archive reports you created, and unsubscribe from non-essential emails using the link in any message. Depending on where you live, you may have rights to access, correct, export, or delete your personal information. Contact us to make a request.

We send transactional messages such as account confirmation, password resets, and reports you choose to send. Product and update emails include an unsubscribe link. Opting out of product emails does not stop essential account messages.

TESSA is a professional tool and is not directed to anyone under 16.

We may update this policy as the product changes. Material changes will be reflected in the "last updated" date above, and continued use of TESSA after an update constitutes acceptance.

Questions about privacy or a data request? Email support@tessabiomed.com. See also our Terms & Conditions.