Privacy policy

Open Path Media Group LLC (“Open Path Media,” “we,” “us,” or “our”)

Last Updated: 06-10-2026

Mailing Address: hello@openpathmediagroup.com

Email: hello@openpathmediagroup.com

Phone: (954) 738-1578


This Privacy Policy describes how Open Path Media Group LLC collects, uses, stores, and discloses information in connection with:


  1. Our website;

  2. The Open Path Media Review Sync Chrome extension; and

  3. The review-request services and related systems provided through the extension (collectively, the “Service”).


By using our website or Service, you acknowledge the practices described in this Privacy Policy.

Open Path Media Group LLC (“Open Path Media,” “we,” “us,” or “our”)

Last Updated: 06-10-2026

Mailing Address: hello@openpathmediagroup.com

Email: hello@openpathmediagroup.com

Phone: (954) 738-1578


This Privacy Policy describes how Open Path Media Group LLC collects, uses, stores, and discloses information in connection with:


  1. Our website;

  2. The Open Path Media Review Sync Chrome extension; and

  3. The review-request services and related systems provided through the extension (collectively, the “Service”).


By using our website or Service, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

1. Information We Collect

1. Information We Collect

Website Visitors

When you interact with our website, we may collect information that you voluntarily provide, including:

  • Name;

  • Email address;

  • Phone number;

  • Information submitted through contact or other website forms; and

  • Cookie, analytics, and similar technical information about your use of our website.


Clinic Staff and Service Users


When you create or use an account for the Service, we may collect:

  • Account email address;

  • Login credentials;

  • Name of your practice or organization;

  • Service and extension configuration settings; and

  • Information associated with your use of the Service.


Passwords are not stored in readable or plaintext form. Session tokens are stored using hashing or other security measures designed to protect them from unauthorized access.


Patient and Customer Information from Client Websites


When an authorized clinic staff member onboards a patient-management or customer-management website and activates monitoring, the extension may read information from that website when a new, changed, or removed patient or customer record is detected.


The information collected may include:

  • Patient or customer name;

  • Email address;

  • Phone number; and

  • Any additional fields that the authorized clinic staff member specifically selects for use by the Service.


The extension monitors only websites that authorized staff explicitly onboard and activate. It reads only the fields that authorized staff configure the Service to monitor.


The clinic or business using the Service is responsible for determining what information may lawfully be collected and used through the Service.


Diagnostics and Error Reports


If you use a “Send Feedback” feature or enable error reporting, we may receive information such as:

  • Feedback category;

  • Your message;

  • Error code; and

  • The website origin or address where the issue occurred.


Error reports are designed not to include patient information, authentication tokens, or stack traces.


Information Stored in Your Browser


The Chrome extension may store certain information locally in your browser or device, including:

  • Login or authentication tokens;

  • Per-site field mappings;

  • Extension configuration information; and

  • Recent activity information.


This information is stored locally to allow the extension to operate and remember your configuration.


Sensitive and Health Information


We do not intentionally collect medical records, diagnoses, treatment information, payment card information, or other clinical information through the Service.

Website Visitors

When you interact with our website, we may collect information that you voluntarily provide, including:

  • Name;

  • Email address;

  • Phone number;

  • Information submitted through contact or other website forms; and

  • Cookie, analytics, and similar technical information about your use of our website.


Clinic Staff and Service Users


When you create or use an account for the Service, we may collect:

  • Account email address;

  • Login credentials;

  • Name of your practice or organization;

  • Service and extension configuration settings; and

  • Information associated with your use of the Service.


Passwords are not stored in readable or plaintext form. Session tokens are stored using hashing or other security measures designed to protect them from unauthorized access.


Patient and Customer Information from Client Websites


When an authorized clinic staff member onboards a patient-management or customer-management website and activates monitoring, the extension may read information from that website when a new, changed, or removed patient or customer record is detected.


The information collected may include:

  • Patient or customer name;

  • Email address;

  • Phone number; and

  • Any additional fields that the authorized clinic staff member specifically selects for use by the Service.


The extension monitors only websites that authorized staff explicitly onboard and activate. It reads only the fields that authorized staff configure the Service to monitor.


The clinic or business using the Service is responsible for determining what information may lawfully be collected and used through the Service.


Diagnostics and Error Reports


If you use a “Send Feedback” feature or enable error reporting, we may receive information such as:

  • Feedback category;

  • Your message;

  • Error code; and

  • The website origin or address where the issue occurred.


Error reports are designed not to include patient information, authentication tokens, or stack traces.


Information Stored in Your Browser


The Chrome extension may store certain information locally in your browser or device, including:

  • Login or authentication tokens;

  • Per-site field mappings;

  • Extension configuration information; and

  • Recent activity information.


This information is stored locally to allow the extension to operate and remember your configuration.


Sensitive and Health Information


We do not intentionally collect medical records, diagnoses, treatment information, payment card information, or other clinical information through the Service.

2. How We Use Information

We may use information we collect to:

  • Respond to inquiries and requests;

  • Provide, operate, maintain, and support the Service;

  • Create and manage user accounts;

  • Configure and operate the Chrome extension;

  • Schedule and facilitate review requests after authorized clinic staff confirm a patient or customer;

  • Send relevant patient or customer contact information to the clinic’s connected GoHighLevel account so that review requests can be delivered;

  • Display review-request activity to authorized clinic staff;

  • Display Google Business Profile reviews to authorized clinic staff and allow them to respond through connected services;

  • Diagnose and resolve technical problems;

  • Maintain the security and integrity of the Service;

  • Improve and develop our products and services;

  • Send service-related updates and communications; and

  • Comply with applicable laws, regulations, legal processes, and contractual obligations.


Patient and Customer Information


With respect to patient or customer information collected from a client’s website, Open Path Media acts as a service provider or processor on behalf of the applicable clinic or business, to the extent required by applicable law.


The clinic or business determines which individuals are contacted and is responsible for ensuring that it has the necessary legal basis, permissions, and consents to contact those individuals.

3. How We Share Information

We do not sell personal information.


We do not share personal information with third parties for their own independent marketing or advertising purposes.


We may share information with service providers and other parties when reasonably necessary to operate the Service, including:


GoHighLevel

We may share relevant customer or patient contact information with the clinic’s connected GoHighLevel account so that review requests can be delivered.


Hosting and Database Providers

We use third-party hosting, infrastructure, and database providers to store and process Service data.


Google

When a clinic connects its Google Business Profile to the Service, we may access and process information from Google to display reviews and provide functionality that allows authorized clinic staff to respond to reviews.


Google-related access is limited to clinic accounts that have authorized the applicable connection.


Professional Advisers and Legal Authorities

We may disclose information to attorneys, accountants, auditors, consultants, regulators, law enforcement, government authorities, or other third parties when reasonably necessary to:

  • Comply with applicable law or legal process;

  • Protect our rights, property, or safety;

  • Protect users or the public;

  • Investigate suspected fraud, abuse, or security incidents; or

  • Enforce our agreements and policies.


Business Transfers

If Open Path Media is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable legal requirements.

4. Chrome Web Store Limited Use

Our collection, use, and transfer of information obtained through Chrome extension permissions complies with the applicable Chrome Web Store User Data Policy, including the Limited Use requirements.


Information obtained through the extension is used only for purposes necessary to provide, maintain, secure, and improve the review-request features described in this Privacy Policy.


We do not sell information obtained through the extension.


We do not use information obtained through extension permissions for advertising or creditworthiness or lending-related purposes.


Access to such information is limited to circumstances reasonably necessary to provide or improve the Service, maintain security, comply with applicable law, or where authorized by the user.

5. SMS Communications

Website SMS Communications

By submitting your phone number through our website and affirmatively checking the applicable consent box, you consent to receive conversational SMS messages from Open Path Media Group LLC relating to your inquiries, customer support, appointment scheduling, follow-ups, and other service-related communications.


Message frequency varies depending on your interactions with us.


Message and data rates may apply.


You may opt out at any time by replying STOP to any SMS message. For assistance, reply HELP.


Mobile Information and SMS Consent

We do not sell mobile information or share mobile information with third parties or affiliates for their own marketing or promotional purposes.


We may share information with service providers and subcontractors that support our SMS and customer-service operations, such as message-delivery providers and customer-support providers, solely as necessary to provide the requested services.


Text-message opt-in information and consent records will not be shared with third parties outside these service providers except where required by law or otherwise authorized by you.


Review Requests Sent on Behalf of Clinics

Review-request messages sent to patients or customers through the Service are sent on behalf of the applicable clinic or business.


The clinic or business is responsible for obtaining all legally required consent and permissions to contact its patients or customers.


Recipients may opt out of SMS review-request communications by replying STOP or using any other opt-out mechanism provided in the message.

6. Cookies and Similar Technologies

We use cookies and similar technologies on our website to:

  • Improve website functionality and user experience;

  • Understand how visitors use our website;

  • Analyze website performance; and

  • Improve our services.


The Chrome extension itself does not use cookies for tracking purposes.

7. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law.


Our current retention practices include:

  • Unconfirmed patient/customer entries: Patient or customer entries that are not confirmed by authorized staff within the applicable two-hour confirmation period are cancelled and are no longer eligible for a review request. These records are deleted or anonymized within 30 days.

  • Confirmed review-request records: Confirmed review-request records, including campaign activity and related operational information, are retained for 12 months and then deleted or anonymized.

  • Account information: Account information is retained while the account remains active and for 90 days after account termination, unless a longer period is needed for legal, security, billing, dispute-resolution, or recordkeeping purposes.

  • Website inquiries: Information submitted through website inquiries is retained for 12 months and then deleted or anonymized, unless ongoing communication or a legal obligation requires longer retention.

  • Backups: Deleted information may remain in secure system backups for a limited additional period, generally not exceeding 30 days, before being overwritten or removed through normal backup-rotation processes.


We may retain certain information for longer periods when reasonably necessary to comply with legal obligations, resolve disputes, enforce agreements, prevent fraud or abuse, maintain security, or protect our legal rights.

8. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, or destruction.


Our security measures include, where applicable:

  • HTTPS/TLS encryption for data transmitted between systems;

  • Secure password hashing;

  • Hashing or other security protections for session tokens;

  • Restricted access to production systems and data; and

  • Access controls designed to limit data access to authorized personnel and systems.


However, no method of transmission or electronic storage is completely secure. We cannot guarantee that personal information will never be accessed, disclosed, altered, or destroyed as a result of a security incident.

9. Your Privacy Rights

Depending on where you live and applicable law, you may have rights regarding your personal information, including the right to request:

  • Access to personal information we hold about you;

  • Correction of inaccurate personal information;

  • Deletion of personal information;

  • Information about how your personal information is collected and used; and

  • Other rights provided by applicable privacy laws.


To exercise applicable rights, contact us at hello@openpathmediagroup.com.


If you are a patient or customer of a clinic that uses the Service, you may also contact that clinic directly. Where appropriate, Open Path Media may direct your request to the applicable clinic because the clinic may control the underlying patient or customer information.


Depending on your location, you may have additional rights under state or other applicable privacy laws, including potentially the California Consumer Privacy Act and related regulations.


We will evaluate and respond to valid requests in accordance with applicable law.

10. Children’s Privacy

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information directly from children under 13.


If you believe that a child under 13 has provided personal information to us, please contact us so that we can evaluate and, where appropriate, delete the information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements, or privacy practices.


When we make changes, we will update the “Last Updated” date at the top of this Privacy Policy.


If we make material changes, we may provide additional notice to account holders or users where required by applicable law.


Your continued use of the website or Service after an updated Privacy Policy becomes effective constitutes acknowledgment of the updated policy, to the extent permitted by applicable law.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Open Path Media Group LLC

Email: hello@openpathmediagroup.com

Phone: (954) 738-1578