Privacy Policy

1Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide to us, including:

• Contact information (name, email address, phone number)
• Communications you send to us via email or other channels
• Newsletter and waitlist sign-up information
• Feedback, suggestions, and survey responses
• Any other information you choose to provide when interacting with us

1.2 Information Automatically Collected

When you visit our website, we may automatically collect certain technical information:

• IP address and location data
• Browser type and version
• Operating system
• Referring website addresses
• Pages visited and time spent on our website
• Date and time of visits

2How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and communicate with you
• Send updates about Elderella's development and launch
• Improve and develop our services based on feedback
• Understand how visitors use our website
• Comply with legal obligations
• Protect against fraudulent or illegal activity

2.1 Use of Anonymized and Aggregated Data

We may create anonymized and aggregated data from the information we collect by removing identifying information that makes the data personally identifiable to you. We may use such anonymized and aggregated data for our own lawful business purposes, including but not limited to:

• Analyzing usage patterns and trends to improve our services
• Conducting research and development
• Creating statistical reports and analytics
• Developing new features and services
• Publishing insights about caregiving trends (without identifying individuals)

This anonymized data cannot be used to identify you and is not considered personal information under privacy laws.

3How We Share Your Information

We respect your privacy and will not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• With Your Consent: We will share your information when you explicitly authorize us to do so
• Service Providers: We may share information with trusted third-party service providers who assist us in operating our website and business (e.g., email services, analytics, scheduling tools such as Calendly, customer relationship management platforms such as Attio, and cloud storage providers such as Google Cloud). These providers may process or store your data in Canada, the United States, or other jurisdictions.
• Partners for Recognition: With your explicit consent, we may share your name and contact information with partners for the purpose of recognizing your participation in programs, providing awards, or acknowledging your contributions to the caregiving community
• Non-PHI Data Licensing: We may license access to aggregated, de-identified, non-Protected Health Information (non-PHI) data to third parties for research, analysis, or commercial purposes. Such data will not include any information that could reasonably identify you or any specific individual
• Legal Requirements: We may disclose information if required by law, court order, or government regulation
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction
• Protection of Rights: We may disclose information to protect the rights, property, or safety of Elderella, our users, or others

4Your Rights and Choices

You have certain rights regarding your personal information:

• Access: You may request access to the personal information we hold about you
• Correction: You may request that we correct inaccurate or incomplete information
• Deletion: You may request that we delete your personal information, subject to certain exceptions
• Opt-Out: You may opt out of receiving marketing communications from us at any time
• Withdraw Consent: Where we rely on consent, you may withdraw it at any time
• Retention: We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Typically, we retain personal data for up to 5 years after your last interaction with us to improve our services, unless you request deletion or a longer retention period is required by law

5Data Security and Storage

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5.1 Data Storage Location

Your health information and personal data are securely stored on Google Cloud servers located in Montreal, Canada. While stored outside the United States, your data remains protected under our Business Associate Agreement with Google Cloud and all applicable privacy requirements. Canadian privacy laws, including PIPEDA, provide strong protections for your information. Canadian authorities may have access to data stored in Canada under Canadian law.

Your personal data may also be processed by other trusted third-party service providers (such as Calendly and Attio), which may store data in the United States or other jurisdictions. We take steps to ensure appropriate safeguards are in place when information is transferred internationally.

6Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information.

7International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from those in your country. We will ensure appropriate safeguards are in place to protect your personal information in accordance with this Privacy Policy.

8Compliance with Laws

We are committed to complying with applicable privacy laws, including:

• The Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada
• State privacy laws in the United States, including the California Consumer Privacy Act (CCPA) where applicable
• Applicable regional and local privacy regulations in jurisdictions where we operate

8.1 Healthcare Data Protection

We take the protection of health-related information seriously. Our technical infrastructure, including our use of Google Cloud with appropriate security measures, is designed to meet healthcare industry standards for data protection. We are building both the processes and technical infrastructure to securely handle Protected Health Information (PHI). We maintain Business Associate Agreements (BAAs) with our infrastructure partners, including Google Cloud, to ensure the secure storage and handling of your personal and health data.

8.2 PIPEDA Compliance

As a Canadian corporation, we comply with PIPEDA requirements for the collection, use, and disclosure of personal information in the course of commercial activities. This includes obtaining meaningful consent, limiting collection to necessary purposes, ensuring accuracy, implementing appropriate safeguards, and providing individuals with access to their personal information upon request.

9Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new effective date. We encourage you to review this Privacy Policy periodically.

10Contact Us

11California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA). These rights include the right to know what personal information we collect, the right to delete your information, and the right to opt-out of the sale of your personal information (though we do not sell personal information). To exercise these rights, please contact us using the information provided above.

12Accessibility

We are committed to ensuring that our privacy practices are accessible to all individuals. If you need this Privacy Policy in an alternative format, please contact us.