Privacy Policy

1. Information We Collect

We collect information that identifies, relates to, or could reasonably be linked to you ("Personal Data").

• Directly from You: Name, email address, and any information you input into our Discovery Algorithm. You are responsible for ensuring the accuracy of all information you provide.
• Payment Information: Collected by our third-party processor, Stripe. We do not store or have access to your full credit card numbers except as permitted by law or required for fraud prevention, dispute resolution, or compliance purposes.
• Health Information: Any clinical data provided during a telehealth consultation is collected and stored by Tebra Health, our secure Electronic Medical Record (EMR) provider.

We may also collect technical, device, and usage information automatically, including IP address, browser type, operating system, and interaction data for security and analytics purposes.

2. Third-Party Service Providers

To provide a seamless experience, we share certain data with trusted partners. Each partner maintains its own privacy standards:

• A. Stripe (Payment Processing)
  We use Stripe for payments, analytics, and subscription management. Stripe collects and processes your payment data under its own privacy policy.
  Data Shared: Billing address, email, and payment method details.
  Purpose: To process transactions and manage your Premium subscription.
• B. Tebra Health (Electronic Medical Records & Telehealth)
  Clinical interactions are managed via Tebra Health.
  Data Shared: Your medical history, intake forms, and telehealth video/audio data.
  Purpose: To provide HIPAA-compliant clinical care and maintain your medical records.

We are not responsible for the privacy, security or data handling practices of third-party service providers. Your interactions with these providers are governed solely by their respective privacy policies.

3. How We Use Your Information

We use your information to:

• Operate the Discovery Algorithm and provide educational recommendations.
• Manage your Premium account and process recurring payments.
• Facilitate telehealth appointments with licensed providers.
• Comply with legal obligations and protect against fraudulent activity.
• Improve, troubleshoot and enhance our services, algorithms and user experience.
• Conduct internal analytics, quality assurance and performance monitoring.
• Develop new products, features and clinical or educational tools.
• Protect the integrity and security of our systems, including monitoring for fraud, abuse or unauthorized access.

The Discovery Algorithm provides educational insights only and is not a substitute for professional medical advice. PelviZen is not liable for decisions made based on algorithmic outputs.

4. Oregon Privacy Rights (OCPA)

As an Oregon-based company, we comply with the Oregon Consumer Privacy Act (OCPA).

• Right to Know/Access: You may request to see the personal data we have collected about you. We may require reasonable verification of your identity before responding to any privacy request. We may deny requests where disclosure would compromise security, violate law, infringe on the rights of others or interfere with necessary business operations.
• Right to Delete: You may request that we delete your personal data, subject to certain legal exceptions (such as medical record retention requirements). Deletion requests do not apply to data required for medical retention, fraud prevention, legal compliance, internal analytics or transactional history.
• Right to Opt-Out: We do not sell your personal data as defined under OCPA. We may, however, use de-identified or aggregated data for business purposes. You have the right to opt-out of targeted advertising.
• Minors: PelviZen is not intended for individuals under the age of 16. We do not knowingly collect or sell the data of minors.

5. Data Security & Retention

We implement industry-standard security measures to protect your data.

• Clinical Data: Stored in Tebra's HIPAA-compliant environment.
• Financial Data: Managed by Stripe's PCI-compliant infrastructure.
• Retention: We retain your data for as long as your account is active or as required by Oregon medical record retention laws.

No method of transmission or storage is 100% secure and we cannot guarantee absolute security.

We may retain certain information after account closure as necessary for compliance, dispute resolution, fraud prevention or legitimate business interests.

6. Cookies and Tracking

We use cookies to remember your login status, authentication, analyze website traffic, analytics, security monitoring and service improvement. You can manage your cookie preferences through your browser settings, though some features of PelviZen may not function correctly without them.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Effective Date."

Your continued use of the services after any update constitutes acceptance of the revised Privacy Policy.

We reserve the right to modify our data practices at any time, subject to applicable law.