Privacy Policy

This Privacy Policy describes how Aurelia MD ("we", "us") collects and uses information on aureliamd.com (the "Site"), our public marketing website. The Site is not the Aurelia MD product. If you are a patient or clinician using an Aurelia MD-powered product deployment at your practice, a separate notice of privacy practices applies to that deployment and supersedes this policy for protected health information ("PHI").

1. Information we collect

We collect information you provide directly to us and a limited amount of information automatically.

1.1 Information you provide

• Contact form submissions. When you message us, we collect your name, email, practice, and the content of the message.
• Communications. If you email us, we keep that correspondence.

1.2 Information collected automatically

• Request metadata. When you submit a form, we record the submission timestamp and the browser user-agent string so we can filter abuse.
• Server and CDN logs. Our hosting provider logs standard HTTP metadata (IP address, referer, user-agent) for operational and security purposes.
• Analytics. The Site may use privacy-respecting, cookieless analytics to measure aggregate traffic. We do not track individuals across sites.

We do not collect patient health information through this Site. Please do not send PHI by email or through any form on this Site.

2. How we use information

• To notify you about early access, product launches, and material updates.
• To respond to inquiries you send us.
• To operate, secure, and improve the Site.
• To comply with our legal obligations.

We do not sell your information. We do not use it for third-party advertising.

3. How we share information

We share information only with service providers acting on our behalf and only to the extent needed for them to perform their role:

• Google Cloud / Firebase — hosting and edge delivery. Covered by Google's security commitments.
• Cloudflare — DNS and email routing for inbound mail to @aureliamd.com addresses.
• Resend — transactional email delivery for contact-form submissions and replies.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, property, or safety of Aurelia MD or others.

4. Data security

We use commercially reasonable safeguards to protect the information we collect, including encryption in transit (HTTPS), database-layer access rules that restrict who can read or modify submission data, and PII redaction in application logs.

5. Data retention

We keep contact-form submissions and other inquiry data for as long as necessary to operate the Site, respond to you, and comply with legal obligations. You can request deletion at any time.

6. Your rights

You can request to access, correct, or delete the information we hold about you. Email us at privacy@aureliamd.com.

7. Children

The Site is not directed to children under 13, and we do not knowingly collect information from them.

8. International users

The Site is operated from the United States. If you access it from outside the U.S., your information will be transferred to, stored, and processed in the U.S.

9. Cookies

The Site does not set first-party tracking cookies. If we introduce analytics that use cookies, we will update this policy and — where required — request your consent.

10. HIPAA & protected health information

The Aurelia MD marketing site is not a HIPAA-covered service and does not process PHI. The Aurelia MD product, deployed to a practice under a Business Associate Agreement ("BAA"), is designed to operate as a HIPAA business associate for that practice.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date reflects the most recent revision.

12. Contact us

Questions? Email privacy@aureliamd.com or hello@aureliamd.com.