Privacy Policy: the Practice Diagnostic in AI Assistants

Who we are and what this covers

Alchemy Inside is a service of Boffo Digital LLC, a Texas limited liability company. "We" and "us" on this page mean Boffo Digital LLC.

This policy covers the Alchemy Inside Diagnostic plugin for ChatGPT and Codex and the MCP server behind it at mcp.alchemyinside.com: what they receive, why, who else receives it, how long it's kept and the choices you have. The rest of alchemyinside.com is covered by our site privacy policy. The AI assistant you use handles your conversation under its own privacy policy; we never receive the conversation.

At a glance

What we collect

When you run the diagnostic in an AI assistant, the assistant sends our server only what scoring needs: your practice type, your annual revenue band and your 12 multiple-choice answers (each a letter from A to D). The diagnostic never asks for your name, your email, your practice's name or any patient information, and you shouldn't share them. If you do type them into the conversation, the plugin doesn't need or use them.

Like any web server, ours receives each request's IP address and basic request metadata.

How we use it

• To score your answers and return your results, the area to look at first and an estimated range.
• To answer follow-up questions about one area with our guidance.
• To deliver requests, apply a rate limit, keep the service running and investigate abuse.
• To count, in aggregate, how many diagnostics are completed and how many come from AI assistants.

We don't use any of it for advertising, we don't build profiles of you, and we don't sell or rent personal information.

Who receives it

• Cloudflare hosts the MCP server. It processes each request, including the IP address, to deliver it and to apply a rate limit, and keeps our operational logs.
• Google Analytics receives two events when you open the results link on alchemyinside.com, subject to your cookie choice: scorecard_completed, with the area to look at first, the service the results point to, the estimated range, the total score, your practice types and your revenue band; and scorecard_agent_results, which records that the results came from an AI assistant, with the area to look at first. Neither includes your individual answers, your name or your email.
• We don't share it with anyone else, except where the law requires.

How long we keep it

• Your answers: not kept by us. The server uses them for the request and discards them, and never writes them to its logs.
• Operational logs: deleted automatically after at most 7 days.
• Analytics events: kept by Google Analytics for 14 months, then deleted.
• Results saved in your browser: stay on your device until you clear your browser's storage for alchemyinside.com.

Your choices

• No account. The plugin needs no sign-in, so there's no profile of you for us to keep, correct or delete.
• Analytics. In the EEA, the UK and Switzerland, analytics stay off unless you accept. Everywhere else they're on by default, and Decline in the cookie banner turns them off on that browser. You can change your choice at any time from the link in the site footer.
• Saved results. Clear your browser's storage for alchemyinside.com to remove them.
• Don't open the link. If you never open the results link, nothing reaches Google Analytics and nothing is saved in your browser.
• Questions or requests. Email us at hello@alchemyinside.com, and we'll answer within 30 days.

Children

The diagnostic is built for owners and managers of cash-pay practices and isn't directed at children. We don't knowingly collect personal information from children.

Security

The server is reachable only over HTTPS, receives no credentials, stores no answers and only reads; it can't change anything on your behalf.

Changes

If we change what the plugin collects or how we handle it, we'll update this page and its date before the change takes effect.

Contact

Boffo Digital LLC, hello@alchemyinside.com. Support: alchemyinside.com/contact.