Privacy Policy

1. Introduction

Laura Health, Inc. ("Laura," "we," "us," or "our") takes your privacy seriously — especially because the health information you share with us is deeply personal. This policy explains what we collect, why we collect it, and how we protect it.

2. Information we collect

Information you provide: Name, email address, date of birth, state of residence, and health information you submit during intake or consultations (symptoms, medical history, current medications, etc.).

Payment information: Billing details are processed by our payment provider (Stripe). We do not store your full card number.

Usage data: Pages visited, time on site, and interactions with the platform, collected via cookies and analytics tools (see section 6).

3. How we use your information

We use your information to:

• Facilitate your telehealth consultation and prescription
• Communicate with you about your care
• Process payments and send receipts
• Improve our platform and patient experience
• Comply with legal and regulatory obligations
• Send service updates (you can opt out of marketing emails at any time)

4. HIPAA and protected health information

Health information you share with clinicians through Laura is protected health information (PHI) under HIPAA. We maintain a HIPAA-compliant platform and sign Business Associate Agreements (BAAs) with vendors who handle PHI. We will not sell or rent your PHI. We disclose PHI only as permitted by HIPAA: for treatment, payment, healthcare operations, or as required by law. You have the right to access, amend, and request an accounting of disclosures of your health information — contact us at privacy@trylaura.com to exercise these rights.

5. Sharing your information

We do not sell your personal information. We share it only with:

• Clinicians — to provide your consultation and treatment
• Pharmacy partners — to dispense and ship your prescription
• Payment processors — to complete transactions (Stripe)
• Service providers — infrastructure, email, and analytics vendors under confidentiality agreements
• Legal authorities — when required by law, court order, or to protect safety

6. Cookies and analytics

We use PostHog for product analytics to understand how patients use our platform and improve it. PostHog data is pseudonymous and we do not share it with advertisers. We use essential cookies to keep you logged in. You can disable non-essential cookies in your browser settings, though this may affect platform functionality.

7. Data retention

We retain your health records for at least 7 years as required by applicable law. Account and billing data is retained for 5 years after your last transaction. You may request deletion of non-health data at any time; health records are subject to retention requirements and cannot always be deleted on request.

8. Security

We use industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security reviews. No system is 100% secure — if you believe your account has been compromised, contact us immediately at support@trylaura.com.

9. Your rights

Depending on your state of residence, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of non-health data
• Opt out of marketing communications
• Data portability (receive your data in a machine-readable format)

To exercise any of these rights, email privacy@trylaura.com. We will respond within 30 days.

10. Children's privacy

Our service is intended for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such information, contact us and we will delete it promptly.

11. Changes to this policy

We may update this policy as our practices evolve or as required by law. We will notify you of material changes by email or prominent notice on the site. The "last updated" date at the top of this page reflects the most recent revision.

12. Contact

Questions or concerns about this policy? Email privacy@trylaura.com. For HIPAA-related requests, you may also contact our Privacy Officer at the same address.