Privacy Policy

At HelloStudys, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

1. Information We Collect

Information You Provide to Us

We collect information that you voluntarily provide to us, including:

• Study Coordinators/Sponsors: Name, email address, organization, phone number, study information, payment information
• Patient Leads: Name, email address, phone number, age, location, basic health information relevant to study eligibility

Automatically Collected Information

When you visit our website, we automatically collect certain information:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on pages
• Referring website addresses
• Cookies and similar tracking technologies

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain our services
• Connect patient leads with appropriate clinical trials
• Process payments and manage subscriptions
• Send important service updates and notifications
• Respond to inquiries and provide customer support
• Improve our website and services
• Prevent fraud and ensure platform security
• Comply with legal obligations

3. How We Share Your Information

Patient Lead Information

When you express interest in a clinical trial through our platform, your information is shared with the study coordinator or sponsor who has claimed that specific study page. This sharing is necessary to connect you with the study and determine your eligibility.

Service Providers

We share information with trusted third-party service providers who help us operate our platform:

• Stripe: Payment processing (subject to Stripe's privacy policy)
• Supabase: Database and authentication services
• Vercel: Website hosting and infrastructure
• Email service providers: For sending notifications and updates

These providers are bound by confidentiality agreements and may only use your information to provide services to us.

Legal Requirements

We may disclose your information if required by law, court order, or governmental request, or to protect the rights, property, or safety of HelloStudys, our users, or others.

4. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (SSL/TLS) and at rest
• Secure database infrastructure with access controls
• Regular security audits and updates
• Strict access controls limiting employee access to personal data
• HIPAA-compliant data handling practices

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. HIPAA Compliance

HelloStudys is designed to comply with the Health Insurance Portability and Accountability Act (HIPAA) when handling protected health information (PHI).

• We collect only the minimum necessary health information for study screening purposes
• All PHI is encrypted and stored securely
• Access to PHI is limited to authorized study coordinators for their specific studies
• We maintain audit logs of PHI access
• Business Associate Agreements (BAAs) are available upon request for covered entities

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Remember your preferences and settings
• Understand how you use our website
• Improve our services
• Provide personalized content

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our website.

7. Your Privacy Rights

You have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Opt-Out: Unsubscribe from marketing communications at any time
• Data Portability: Request a copy of your data in a portable format
• Withdraw Consent: Withdraw consent for data processing where consent is the legal basis

8. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Active Accounts: Information is retained while your account is active
• After Cancellation: Account data is retained for 90 days, then deleted unless legally required to retain longer
• Patient Leads: Lead information is retained for the duration of the study coordinator's subscription
• Financial Records: Payment information is retained for 7 years for tax and accounting purposes

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will delete that information promptly.

10. International Data Transfers

Our services are based in the United States. If you access our services from outside the United States, your information will be transferred to, stored, and processed in the United States. By using our services, you consent to this transfer.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at kevin@neverpeakmarketing.com

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users at least 30 days before taking effect. The "Last Updated" date at the top of this policy indicates when it was last revised.

13. Contact Us