Privacy Policy

AVENORA HEALTH PLLC dba Birth Science Unpacked ("Birth Science Unpacked," "BSU," "we," "us," or "our") operates the website at https://reference.birthscienceunpacked.com and the subscription-based clinical reference service available through that website (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

By using the Service, you agree to the collection and use of information in accordance with this Policy.

1. Information We Collect

1.1 Information You Provide Directly

When you sign up for and use the Service, we collect:

• Account information: your email address and any name or display name you provide during sign-up or in your account profile.
• Authentication credentials: verification codes sent to your email to confirm identity. We do not store passwords in plaintext.
• Subscription and payment information: when you purchase a subscription, payment is processed by Stripe, Inc. ("Stripe"). Stripe collects and processes your full payment card information directly. We do not see, store, or have access to your full card number, CVV, or bank account details. We do receive limited billing metadata from Stripe, including the last four digits of your card, card brand, billing ZIP/postal code, expiration date, subscription status, and billing history.
• Communications: if you email us at support@birthscienceunpacked.com or otherwise contact us, we receive and may retain the contents of those communications.

1.2 Information Collected Automatically

When you access the Service, our hosting and infrastructure providers (including Base44 and Stripe) may automatically collect:

• IP address
• Browser type and version
• Device type and operating system
• Pages or screens viewed within the Service
• Date and time of access
• Referring URLs
• Session identifiers

This information is used for security, fraud prevention, system performance, and basic service operation.

1.3 Information We Do Not Collect

We do not collect, request, or process protected health information (PHI) about your patients through the Service. The Service is a clinical reference tool intended for use by qualified clinicians. It is not a health record system, electronic medical record (EMR), or patient management application. Do not enter patient names, identifiers, or other PHI into the Service.

If you enter information that resembles PHI into any input field (such as a calculator or notes field), that information is treated as input data and is not transmitted to identifiable patients, but you remain solely responsible for complying with HIPAA and any other applicable privacy laws in your jurisdiction.

2. How We Use Your Information

We use the information we collect to:

• Create and maintain your user account
• Authenticate you and secure your access to the Service
• Process subscription payments and manage billing
• Send transactional emails (verification codes, receipts, subscription notices, password resets)
• Respond to your support requests
• Detect, prevent, and address security issues, fraud, and technical problems
• Comply with legal obligations
• Improve and develop the Service

We do not sell your personal information. We do not share your personal information with third parties for their marketing purposes.

3. Third-Party Service Providers

We rely on the following service providers, each of which has access to limited information necessary to perform their functions:

• Stripe, Inc. processes all subscription payments. Stripe's privacy practices are governed by Stripe's Privacy Policy at https://stripe.com/privacy.
• Base44 provides hosting and application infrastructure for the Service. Application data, including account information, is stored on Base44's infrastructure.
• Google Workspace is used to send and receive email correspondence at our birthscienceunpacked.com domain addresses.
• Cloudflare provides DNS, security, and content delivery infrastructure for the website.

These providers are contractually obligated to handle information securely and only for the purposes for which we engage them.

4. Data Retention

We retain your account information for as long as your account is active. If you cancel your subscription, your account information may be retained for a reasonable period to enable reactivation, comply with legal obligations, resolve disputes, and enforce our agreements.

You may request deletion of your account by emailing support@birthscienceunpacked.com. Upon verified request, we will delete your account information within a reasonable timeframe, subject to legal retention requirements (for example, financial records required by tax law).

Stripe retains billing records independently for its own legal and regulatory obligations. Deletion of your BSU account does not delete Stripe's records of past transactions.

5. Data Security

We implement reasonable technical and organizational measures designed to protect your information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (HTTPS), authentication controls, and reliance on SOC 2-certified service providers for hosting and payment processing.

No method of electronic storage or transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal information, including:

• Access: request a copy of the personal information we hold about you.
• Correction: request correction of inaccurate information.
• Deletion: request deletion of your account and associated information, subject to legal retention requirements.
• Portability: request a copy of your information in a portable format.
• Withdraw consent: where we rely on consent, withdraw it at any time.

To exercise these rights, email support@birthscienceunpacked.com from the email address associated with your account. We will respond within 30 days.

If you are a resident of California, the European Economic Area, the United Kingdom, or another jurisdiction with specific privacy laws, additional rights may apply. Contact us for jurisdiction-specific requests.

7. Cookies and Similar Technologies

The Service uses cookies and similar technologies that are strictly necessary to operate the Service, including session cookies for authentication and security. We do not use cookies for advertising or cross-site tracking. By using the Service, you consent to the use of these strictly necessary cookies.

8. Children's Privacy

The Service is intended for use by licensed healthcare professionals and is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a child under 18, we will delete it.

9. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this Policy. If changes are material, we will provide notice through the Service or by email to your registered email address. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

11. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal information, contact: