Privacy Policy
Version 1.0. Effective [EFFECTIVE DATE: set in config/legal.ts].
[COMPANY LEGAL NAME: set in config/legal.ts], doing business as Canopy ("Canopy", "we", "us"), finds referral partners and business contacts for healthcare organizations and reaches out to them in our clients' names. This policy explains what personal information we collect, how we use it, and the choices you have.
It covers three groups of people:
- Visitors to canopyrelax.info and app.canopyrelax.info.
- Clients and the members of their teams who use our portal.
- Business contacts: people we research, and may email, on behalf of our clients because of their role at an organization.
What we collect
From visitors. What you enter in our forms, such as your name, email, company and answers when you book a call. Our hosting providers also log basic technical information, such as IP address, browser type and pages visited.
From clients. Account details, contact details, billing details, intake answers, the content you give us, and how you use the portal. Card details are handled by our payment processor; we do not store full card numbers.
About business contacts. Name, job title, employer, work email, work phone, work address, professional profile link, and notes about the person's role and organization. We collect this from public sources, such as organization websites, public directories, professional profiles and government or licensing registries, and from licensed business data providers. We also record whether a person was emailed, replied, bounced or opted out.
How we use it
- To provide our services: finding organizations and the right people at each, checking that they are in the role, and preparing lists for our clients.
- To send email on a client's behalf, only after that client approves both the person and the message.
- To run our business: billing, support, security, keeping records, and improving our services.
- To communicate with you, including about calls you booked.
- To meet legal obligations, including honoring opt-outs.
We use automated tools, including AI, to research organizations, check roles and draft text. Clients approve every list and every email before anything is sent.
How we share it
- With the client a business contact was found for, as part of the service that client pays for.
- With service providers that host our websites and data, process payments, deliver email, provide forms, spreadsheets and storage, supply business data, or process text with AI. They may use the information only to provide their services to us.
- When the law requires it, or to protect our rights, our clients or others.
- In a merger, acquisition or sale of all or part of our business, subject to this policy.
We do not sell personal information to advertisers or to other data companies. We provide business contact information to the client it was found for. Where a state law treats that as a "sale" or "sharing", you can opt out as described below.
If you are a business contact
- Stop emails by replying to any email from us or our clients, or by using the opt-out line in it.
- Opt out entirely at app.canopyrelax.info/opt-out, or by emailing jay@canopyrelax.info. We will stop using your information for any client and add your email to our do-not-contact list, so you are not contacted again. We keep that one entry for as long as we operate, so the opt-out keeps working.
- Ask what we hold, or ask us to correct or delete it, by emailing jay@canopyrelax.info.
Your rights
Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy, to correct it, to delete it, and to opt out of its sale, sharing or use for targeted advertising. To use any of these rights, email jay@canopyrelax.info. We will confirm your request, may need to verify who you are, and will respond within 45 days. An authorized agent may make a request for you. We will not treat you differently for using your rights.
How long we keep it
- Client information: while you are a client, and for up to 60 days after you leave, except billing and legal records we must keep longer.
- Business contact information: while it is useful for the clients it was found for. We delete it when it is no longer needed or when you ask.
- Do-not-contact list: kept for as long as we operate, so opt-outs are honored.
Health information
We do not collect patient information or protected health information. Our clients agree not to send it to us.
Cookies
We use only the cookies needed to run our websites and keep you signed in to the portal. We do not use advertising cookies. If that changes, we will update this policy first. Forms embedded on our sites may set their own cookies.
Security
We protect personal information with reasonable safeguards, including limited access, encryption in transit, and encryption of stored account credentials. No system is perfectly secure.
Children
Our services are for businesses and are not directed to anyone under 18. We do not knowingly collect information from children.
Where we process information
We are based in the United States and process information in the United States. Some of our service providers may process it in other countries.
Changes
We may update this policy. We will post the new version here with a new effective date, and tell clients by email about material changes.
Contact
[COMPANY LEGAL NAME: set in config/legal.ts]
[COMPANY ADDRESS FOR LEGAL NOTICES: set in config/legal.ts]
jay@canopyrelax.info