Privacy Policy

1. Introduction

HealthCareProxyMD ("we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect information you provide when using our service to complete your Health Care Proxy and Living Will documents (your "Proxy Package™").

Important: We Are Not a HIPAA-Covered Entity. HealthCareProxyMD is NOT a HIPAA-covered entity. Our communications are NOT HIPAA-protected. Please avoid sharing highly sensitive information you do not want transmitted via email or other communication channels we use.

Your Choice to Share. You choose what information you share with us. Sharing is voluntary and at your consent. You can stop using our service at any time.

2. Information We Collect

Information You Provide. We collect information you voluntarily provide when using our service, including:

• Name, email address, and phone number
• Information about your care preferences and wishes for your Health Care Proxy and Living Will
• Information about your designated Health Care Proxy/Agent
• Payment information (processed by Stripe; we do not store full card details)
• Any other information you choose to share during your call with our doctor or in email communications

Usage Information. We collect anonymous usage data through Vercel Analytics to understand how visitors use our website. This includes information such as pages viewed, time spent on pages, and general location (city/country level). This data does not personally identify you.

3. How We Use Your Information

We use the information you provide solely to:

• Provide our service: conduct your call with our doctor, prepare your Proxy Package™ documents, and deliver them to you
• Communicate with you: schedule your call, send your completed documents, respond to your questions, and provide customer support
• Process payments: coordinate with Stripe to process your payment
• Improve our service: analyze anonymous usage data to improve our website and service
• Comply with legal obligations: maintain records as required by law or for business purposes

We do not sell or rent your personal information. We do not share your information except as necessary to operate our service (e.g., with payment processors, scheduling/video providers) or as required by law. We do not share your data with marketing data brokers.

4. Communication Channels and Security

Primary Communication: Email. Our primary communication channel is email. We may also communicate via phone or video call using third-party providers (e.g., for your scheduled call with our doctor).

Email Is Not Guaranteed Secure. Email is not guaranteed secure, and communications are not HIPAA-protected. When you share information with us, you consent to us communicating with you via email and other channels necessary to provide our service. You should avoid sending highly sensitive information via email if you are concerned about security.

Reasonable Security Measures. While we implement reasonable security measures and rely on Google's security infrastructure (see "How We Store Your Information" below), no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we take reasonable steps to protect your information.

5. How We Store Your Information

Storage Location. Your information is stored only in our business email inbox and associated Google Workspace tools (including Gmail, Google Calendar, and Google Drive as applicable). This data is protected by Google's account security and access controls. We do not maintain a separate patient portal, electronic health record (EHR), or dedicated database.

No Separate Patient Portal or EHR. We do not use a separate patient portal or electronic health record system. All information is stored in our Google Workspace email and associated tools, protected by Google's security infrastructure and our access controls.

6. Data Retention

We retain your information for as long as necessary to:

• Provide customer support and respond to your inquiries
• Comply with legal, accounting, and business record-keeping obligations
• Resolve disputes and enforce our agreements

Some records (such as transaction information) may be retained longer as required by law or for business purposes. You may request deletion of your information where feasible, subject to our legal and business obligations. See "Your Rights and Choices" below for how to request deletion.

7. Third-Party Services

We use third-party services that may collect or process your information:

• Stripe: Processes payments. Stripe handles your payment card data according to their privacy policy. We receive confirmation and basic transaction information only. We do not store your full payment card details.
• Scheduling and Video/Telephony Providers: We may use third-party services for scheduling calls and conducting video/phone calls. These services may collect information necessary to provide their functionality. Please review their privacy policies.
• Vercel Analytics: Collects anonymous usage data about website visitors. This data does not personally identify you.
• Google Workspace: We use Google Workspace (Gmail, Calendar, Drive) to store and manage your information as described above.

We are not responsible for the privacy practices of third-party services. We encourage you to review their privacy policies.

8. Cookies and Tracking

We use Vercel Analytics, which may use cookies or similar technologies to collect anonymous usage data. We do not use advertising trackers or sell your data to marketing data brokers. You can control cookies through your browser settings, though this may affect website functionality.

9. Your Rights and Choices

How to Request Access or Deletion. You may request access to the personal information we hold about you, or request that we delete your information where feasible. To make a request, email us at Contact@HealthCareProxyMD.com with your name, email address, and the nature of your request (e.g., "I would like to access my information" or "I would like to delete my information").

We will respond to your request within a reasonable timeframe. Note that we may be unable to delete certain information if we are required to retain it for legal, accounting, or business purposes, or if deletion would prevent us from providing ongoing customer support.

Opt-Out of Communications. You may opt out of non-essential communications from us by emailing Contact@HealthCareProxyMD.com. We may still send you essential communications related to your service or account.

10. Children's Privacy

Our service is intended for adults (age 18 and older). We do not knowingly collect information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately at Contact@HealthCareProxyMD.com.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of our service after changes become effective constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or our privacy practices, please contact us at Contact@HealthCareProxyMD.com.