Include privacy policy in compact connect app

[landonshumway-ia]

While setting up a production Authorize.net account for the OT compact, we were requested to share the privacy policy for the Compact Connect Application. This is not currently defined. The system does collect email addresses at the time of user registration, and Authorize.net collects billing information in order to process credit card transactions

We will be working with legal to help define this privacy policy for us. Once it is defined, this ticket involves including that privacy policy so that users may view it.

Notes

Currently, Authorize.net collects the card number, cvv, expiration, first and last name of cardholder, and zip.

Questions

1. Q: Do we need a privacy policy for staff users as well?
   • A: ???
2. Q: Does the practitioner privacy policy need to include what information Authorize.net collects?
   • A: ???

Assumptions

1. Assumption text...

Estimate: ?? hrs

• Item 1: ?? hrs
• TODO

Implementation Notes

QA Notes

• TODO

[isabeleliassen]

Need to check with bank as to whether they want a privacy policy from CompactConnect, OT Compact, IA, credit card processor, etc.

[isabeleliassen]

split into FE and design ticket

[StacyNGriffin]

Attached is the content for the privacy policy. I'm not sure if we need a backend ticket as well.

Privacy Policy for CompactConnect.org_approved 7.14.25.pdf
Privacy Policy for CompactConnect.org_approved 7.14.25.docx