Privacy Policy

NeuroAffirm Family ("we," "us," or "our") operates the website at neuroaffirm.org (the "Site"). We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

1. Information We Collect

Information you provide directly

• Contact forms: First name, last name, email address, phone number (optional), and your message.
• Newsletter signup: Email address.
• Appointment scheduling: Name, email, phone number, and appointment preferences (collected through our scheduling partner, HubSpot).
• Testimonials: Name, relationship to student, student age range, your story, email, phone, and consent preferences.
• Chat assistant: Messages you type into the AI chat. These are processed in real time and are not stored after your session ends.

Information collected automatically

• Analytics data: Pages visited, time on site, referral source, browser type, device type, and general geographic region. Collected through Google Analytics 4 with IP anonymization enabled.
• Technical data: IP address, browser type, and operating system. Our hosting provider (Cloudflare) processes this data for security and performance purposes.
• Cookies and local storage: See our Cookies Policy for details.

2. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and contact requests
• Schedule appointments and follow up on service requests
• Send our newsletter (only if you signed up)
• Understand how visitors use the Site so we can improve it
• Maintain the security and performance of the Site
• Comply with legal obligations

We do not use your information for advertising, behavioral targeting, or profiling.

3. Who We Share Your Information With

We do not sell, rent, or trade your personal information. We share information only with the following service providers, who process data on our behalf:

• HubSpot — Stores contact form submissions, newsletter signups, and appointment scheduling data. HubSpot acts as our customer relationship management (CRM) platform. HubSpot Privacy Policy
• Google Analytics 4 — Collects anonymized analytics data about how visitors use the Site. IP anonymization is enabled. Google Privacy Policy
• Cloudflare — Provides hosting, content delivery, DNS, and security services. Cloudflare may process IP addresses and technical data for security purposes. Cloudflare Privacy Policy
• AI chat service — Processes your chat messages in real time to generate responses. Messages are not stored after the session ends.

We may also disclose information if required by law, court order, or to protect the rights, safety, or property of NeuroAffirm Family or others.

4. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Specifically:

• Contact form submissions and newsletter signups are retained in our CRM until you request deletion.
• Analytics data is retained according to Google Analytics' default retention settings (typically 14 months).
• Chat messages are not stored beyond the active session.

5. Data Protection

We use industry-standard security measures to protect your personal information, including encrypted connections (HTTPS/TLS), secure hosting infrastructure, and access controls. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

6. Your Privacy Rights

Depending on where you live, you may have certain rights regarding your personal information. We honor these rights regardless of your location whenever reasonably possible.

For all visitors

You may request to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information
• Opt out of analytics tracking (see our Cookies Policy for instructions)
• Unsubscribe from our newsletter at any time using the link in any email

California residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale or sharing of your personal information (we do not sell or share personal information for cross-context behavioral advertising)
• Not be discriminated against for exercising your privacy rights

To exercise any of these rights, contact us at sarah@neuroaffirm.org. We will respond within 45 days as required by law.

European visitors (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights including the right to data portability, the right to restrict processing, and the right to lodge a complaint with your local data protection authority. Our legal basis for processing your data is your consent (for analytics and newsletter) and our legitimate interest (for responding to inquiries and maintaining site security).

7. Children's Privacy

Our Site is intended for parents, families, educators, and providers. We do not knowingly collect personal information directly from children under 13. If you believe a child has submitted personal information through our Site, please contact us and we will promptly delete it.

8. Do Not Track Signals

Some browsers send a "Do Not Track" (DNT) signal. There is currently no industry standard for responding to DNT signals. Our Site does not currently respond to DNT signals, but you can manage your cookie preferences as described in our Cookies Policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" at the bottom of this page. We encourage you to review this page periodically.

Contact

If you have questions about this Privacy Policy or want to exercise your privacy rights, please email us at sarah@neuroaffirm.org