BRAG book icon white white square condensed text 2024
Log InCall Now

BRAG book
Privacy and Cookie Policy
CANDACE CROWE INC. (CCD)
DBA CANDACE CROWE DESIGN

Last Updated: September 10, 2026

1. Introduction

Candace Crowe Inc. (“CCD,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy and Cookie Policy explains how we collect, use, and protect information when you use the BRAG book Dashboard at app.bragbookgallery.com (the “Dashboard”).

This Policy applies to all authorized users of the Dashboard, including those accessing it through our custom WordPress plugin or via a hosted subdomain.

2. Information We Collect

a. Personal Information

When you register for or use the Dashboard, we may collect personal information including your name, email address, company name, professional title, and login credentials.

b. Usage Data

We automatically collect information about how you interact with the Dashboard, such as IP address, browser type, pages visited, and usage patterns to improve performance and functionality.

c. Content You Provide

You may upload or submit content, including photos, text, or other materials, which is used to provide and maintain Dashboard services.

d. Lead Information

When a site visitor interacts with a BRAG book gallery (public-facing component of your implementation), we collect information submitted through:

  • Consultation Request Forms — includes name, phone number, and email for marketing or follow-up purposes.
  • MyFavorites Submissions — includes the visitor’s name, phone, email, and the gallery images they selected as “Favorites.”

This lead information is stored in the Dashboard and shared with the practice associated with that gallery.

e. MyFavorites and Cookies

The “MyFavorites” feature stores selected favorite images in cookies on the visitor’s device. When shared, this collection is submitted with lead details and sent to the Dashboard and the respective practice.

3. Text Messaging (SMS) Communications

If you provide a mobile phone number to verify your identity when logging into the BRAG book Dashboard, we will send a one-time text message containing a verification code. You will receive one text message each time you verify your phone number, typically once at signup and again if we ask you to re-verify for security purposes. Message and data rates may apply.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third party for any purpose.

Reply STOP at any time to stop receiving text messages, or HELP for assistance. If you opt out of text messages, an alternate verification method may be required to access your account.

4. How We Use Your Information

We use collected information to:

  • Provide, maintain, and improve the Dashboard and related services;
  • Authenticate access and manage user accounts;
  • Process and deliver Consultation and MyFavorites leads to practices;
  • Communicate with users regarding support, updates, or technical notices;
  • Comply with applicable legal obligations;
  • Analyze usage trends to optimize user experience;
  • Protect against unauthorized access, misuse, or fraud.

5. Cookies and Similar Technologies

What Are Cookies?

Cookies are small data files stored on your device to remember preferences and enhance user experience.

How We Use Cookies

  • Maintain login sessions;
  • Collect anonymous usage analytics;
  • Store MyFavorites image selections;
  • Support system performance, security, and fraud detection.

Types of Cookies Used

  • Essential Cookies — Required for Dashboard functionality;
  • Performance Cookies — Collect anonymous data for optimization;
  • Third-Party Cookies — Used for analytics or embedded content as needed.

Managing Cookies

You can control or disable cookies via your browser settings. Disabling essential cookies may impact your ability to use some Dashboard features.

6. Data Security

We implement reasonable technical, administrative, and physical safeguards to protect personal information from unauthorized access, misuse, or disclosure.

7. Data Retention

We retain personal information only as long as necessary to:

  • Provide services;
  • Comply with legal requirements;
  • Support business operations;
  • Resolve disputes or enforce agreements.

8. Your Rights and Choices

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict the use of your personal information. Contact us to exercise these rights.

9. Children’s Privacy

The Dashboard is not intended for children under 13. We do not knowingly collect personal information from minors.

10. Changes to This Policy

We may update this Policy periodically. Any changes will be posted here with a revised “Last Updated” date. Continued use of the Dashboard constitutes acceptance of the updated terms.

11. Platform Versions

The BRAG book Dashboard may be delivered via:

  • Custom WordPress Plugin — Integrates with your WordPress website to provide front-end gallery and lead capture functionality. While the plugin itself does not collect additional data beyond what’s described, it operates within your existing WordPress environment and may be subject to your own site policies and plugins.
  • Hosted Subdomain — For clients not using WordPress, CCD may host the Dashboard on a branded subdomain (e.g., clientname.bragbookgallery.com). In such cases, CCD remains responsible for hosting, data security, and storage.

This policy applies to all platform versions.

12. AI-Assisted Features

The Dashboard includes an optional AI-assisted case description drafting tool. This tool requires user action to generate output and is not activated automatically. When invoked, prompts are processed by secure third-party AI providers solely for the purpose of generating a response. CCD does not retain, reuse, or repurpose prompt data beyond what is necessary to generate responses, and prompt data is not used to train AI models.

The WordPress plugin automatically maps subscriber-entered procedure descriptions to meta description fields in compatible SEO plugins (e.g., Rank Math, Yoast SEO, All in One SEO); this is conventional data mapping and does not involve AI or third-party data processing.

Users must not submit Protected Health Information (PHI), personally identifiable information (PII), or confidential business data through AI-assisted tools.

13. Third-Party Integrations

a. Pinterest API

The BRAG book Dashboard integrates with the Pinterest API to enable subscribers to access, display, and interact with their Pinterest account data. This application is not endorsed by, affiliated with, or sponsored by Pinterest, Inc. Pinterest® is a registered trademark of Pinterest, Inc.

By connecting a Pinterest account, the subscriber authorizes CCD to access Pinterest data on their behalf as permitted by Pinterest’s API Terms of Service. Through the Pinterest API, CCD may access Pinterest profile information, boards, pins, and any other data scopes explicitly authorized during the connection flow. Pinterest API data is used solely to deliver Dashboard features to the authorized subscriber and is not sold, resold, licensed, or redistributed to any third party.

Upon disconnecting a Pinterest account, CCD will immediately cease all new API requests on that subscriber’s behalf. Any Pinterest-derived data stored in our systems will be permanently deleted within thirty (30) days of disconnection. Residual data in encrypted backups will be purged within ninety (90) days in accordance with our standard backup retention schedule.

b. EMR and Clinical Platform Integrations

The Dashboard currently supports integration with 4D EMR and may support additional third-party EMR, EHR, or clinical imaging platforms in the future. These integrations enable data exchange between the Dashboard and a subscriber’s practice management or clinical systems.

Data exchanged via EMR integrations is subject to HIPAA and the subscriber’s Business Associate Agreement with CCD. CCD does not independently verify the accuracy or completeness of data received from or transmitted to third-party EMR or clinical systems. Integration availability is subject to the policies and uptime of the third-party platform. Subscribers are responsible for ensuring any applicable data processing agreements with their EMR vendor are in place prior to enabling the integration.

14. Lead Submissions and Responsibility

Consultation requests and MyFavorites submissions from your public-facing gallery are collected and stored within the Dashboard. CCD processes these submissions on behalf of the practice or business using the platform. CCD does not sell this data, and it is only shared with the associated practice.

We advise our clients to update their website privacy policy to reflect this data collection from their site visitors.

15. Contact Us

For questions or concerns about this policy or your data, please contact:

Phone: 877.384.7676
Email: [email protected]

© 2026 Candace Crowe Inc. All rights reserved.