What ServiceSalute collects when someone thanks a caregiver, what becomes permanent, and what we cannot undo. The Spanish version governs.
Someone thanks a member of a care team by choosing from a short list of prepared phrases. We store that thank-you privately, and we publish a separate record containing no personal information at all — only a one-way code proving the stored details have not been altered.
We do not collect any information about medical care. The recognition form has no free-text box, so there is nowhere for it to be entered even by accident.
The one-way public code is permanent and cannot be deleted by anyone, including us. The private details behind it can be deleted on request, and deleting them is enough to remove the personal information entirely.
Under Article 4 of Ley 172-13, we process your data only with your free, express and informed consent, given before processing begins.
That consent is collected through a checkbox you must actively tick on the form. It is never pre-ticked. If you do not tick it, the form does not submit and nothing is recorded.
You may withdraw your consent at any time by writing to the address below. Withdrawal does not affect the lawfulness of processing carried out before it.
When you thank a caregiver, we record only the structured choices you make on the form:
There is no free-text field anywhere in the form. You cannot type a comment and we cannot receive one. This is a design decision rather than a policy promise: the risk of someone entering a clinical detail is removed by making it impossible, not by asking them not to.
We do not ask for your name. We do not collect your cédula, date of birth, contact details, insurance information, medical record number, diagnosis, treatment, or any other information about your care.
We do not ask about wait times, cleanliness, billing, or satisfaction. ServiceSalute is not a patient-experience survey and collects none of that data.
We record the network address of a submission briefly, solely to limit how many submissions can come from one place in a short period. It is used to prevent abuse and for nothing else.
The rest of this policy is about giving recognition; this section is the exception. An institution interested in using ServiceSalute can ask us about a pilot through the form on our website. That form is meant for clinic managers, owners and similar staff, not for patients.
It asks for your name and email address and, optionally, a phone number, the name of your institution and a short message. Please do not include anything about a patient or anyone’s care in the message.
By sending the form, you consent to our processing those details solely to reply to you and to discuss a possible pilot, and to their being stored in the United States. We do not add you to a mailing list, we do not sell your data, and we share it with no one except the service providers who store our data and deliver our email. It is kept apart from recognition records and is never linked to them.
If your institution does not become a client, we delete your inquiry within 24 months at most. If it does, your details become part of the client relationship and are governed by the Client Agreement. You may exercise your ARCO rights over this data, including early cancellation, by writing to the privacy address below.
As with the recognition form, the network address of a submission is used briefly to limit repeated submissions and is not stored.
Every recognition is recorded on an independent public record that ServiceSalute does not own or control. This is how a caregiver can prove years later that a recognition is genuine, even if they change employer and even if ServiceSalute ceased to exist.
What is written there is a one-way code derived from the recognition, together with the fact that a recognition occurred and which institution issued it. It contains no name, none of the phrases selected, and nothing about you. It cannot be reversed to recover the underlying details.
Two consequences follow, both permanent. First, that entry cannot be edited or deleted by anyone — not by the institution, not by us, not by a court order directed at us — because no one holds that power over a public record. Second, that is precisely why the entry contains no personal data: we assumed from the outset that anything published there is published forever.
Your data is stored on servers located in the United States of America. The website and its servers also operate in the United States.
This means your data leaves Dominican territory. The legal basis for this international transfer is your express consent, given through the checkbox described above. By ticking it, you consent to your data being processed and stored in the United States.
The public record described above is globally distributed. Its entries are replicated worldwide and readable by anyone. Again: those entries contain no personal data.
A recognition appears on an institution’s public wall only if the person who gave it chose to publish it. If they did not, the recognition still counts and still reaches the caregiver — it simply is not displayed.
The public wall shows the caregiver’s name and role, the phrases selected, and how the giver knows them. It never shows the giver’s name, because we never collected one.
We show an aggregate count per institution. We deliberately do not publish per-caregiver counts, rankings, or any measure that makes the absence of recognition visible. Low participation makes absence meaningless, and a figure that can be read as a performance score changes what the service is for.
Ley 172-13 gives you the rights of Access, Rectification, Cancellation and Opposition. You may exercise them by writing to the privacy address below. We will respond within ten (10) business days.
To verify your identity we may ask for a copy of your cédula or passport. That document is used solely to handle your request and is discarded once it is concluded.
Cancellation: we can do this. When you exercise your right of cancellation, the private details of the recognition are deleted and the content-free public code remains, and the verification page shows that the details have been withheld. That is the intended outcome: the proof survives and the personal information does not.
Access and Rectification: we must be frank about a real limit. Because we never collect your name or contact details, there is generally no way to locate “your” recognitions from your identity. If you ask us for a copy of your data or for it to be corrected, we usually cannot find it — not through refusal, but because the anonymity that protects you also makes you unfindable to us. Where you can identify a specific recognition (for example, you still have the link), we can act on that one.
Opposition: you may object to processing at any time by withdrawing your consent, with the effect described above.
Private records are kept while the issuing institution is a client, and for a reasonable period afterwards so that credentials remain verifiable for those who earned them. Rate-limiting records are kept briefly and then discarded. Inquiries made through our pilot form are deleted within 24 months at most if the institution does not become a client.
The public record entry is permanent, as described above.
We do not sell personal data. We do not share it for advertising and we do not use it to train machine-learning models.
We use service providers to operate the platform. They process information on our instructions and for no purpose of their own.
The institution that issued a recognition can see the recognitions it issued. It cannot see any other institution’s.
We may disclose information where required by law. Note that we cannot remove a public record entry in response to such a demand, because no one can.
The service is not directed at minors and we do not knowingly collect their data. Because we collect no identifying information at all, we have no way to detect a minor’s use — a further reason the form collects nothing beyond prepared choices.
Private records are held under strict access controls, and the values used to produce each credential’s public code are never exposed outside our systems.
No system is perfectly secure. What we can say is narrower and more useful: the information at risk in a breach of our database would be a caregiver’s name, the prepared phrases selected, a relationship category, and the contact details of anyone who has asked us about a pilot. There is no medical information to lose, because we never collected any.
We record which version of this policy was in force when each consent was given, so it is always possible to establish what a person actually agreed to. Material changes will be reflected in a new version identifier and effective date at the top of this page.
This service is operated by Popup Investments E.I.R.L. (RNC 1-32-80092-3), trading as ServiceSalute. The company is the Responsable (data controller) under Ley 172-13.
Registered address: Avenida General Gregorio Luperón #9, Local T-13, Ensanche Luperón, Puerto Plata, República Dominicana.
ARCO requests (Access, Rectification, Cancellation and Opposition): privacidad@servicesalute.com. This inbox is monitored and is the correct route for any request.
Legal notices and general enquiries: soporte@servicesalute.com. Telephone: +1 829-341-7336.
Data Protection Officer: Evelyn Lozada, Oficial de Protección de Datos.
This policy is governed by Ley No. 172-13 on the Protection of Personal Data and other applicable Dominican legislation. Any dispute will be submitted to los Tribunales Ordinarios del Distrito Judicial de Puerto Plata, República Dominicana.
The full text of Ley No. 172-13 was published in Gaceta Oficial No. 10737 of 15 December 2013, and can be consulted on official Dominican State portals — among them the Oficina Nacional de Estadística, at www.one.gob.do.
Under Ley 358-05, the Spanish version of this document is the only authentic one and prevails over any translation, including this one.