Privacy Policy
No protected health information on this site
Every patient, clinician, and visit shown on this website is invented for illustration. "M.R.", "Sarah M.", the census rows, the map, and the call transcript are fictional demonstration data. No real patient information appears anywhere on this site, and this site is not a way to send us any.
When a health system uses the Nestera platform, protected health information is handled under a Business Associate Agreement and the privacy terms in that contract, not under this policy. Please do not email us protected health information.
Cookies and tracking
We do not use cookies on this website. We do not use Google Analytics, advertising pixels, session recording, heatmaps, fingerprinting, or any other tracking technology. There is no cookie banner because there is nothing to consent to.
Your browser stores one thing locally: if you switch between light and dark mode, that preference is saved on your own device so the site remembers it next time. It is never transmitted to us and we cannot read it.
The fonts on this site are served from our own domain rather than from Google Fonts, so loading a page does not tell Google that you were here.
What we collect automatically
Like any website, ours is served by a hosting provider that keeps standard server logs. A log entry can include:
- your IP address
- the page you requested and the page you came from
- your browser type, version, and operating system
- the date and time of the request
We use these logs only to keep the site online, diagnose errors, and investigate abuse or attacks. We do not use them to build a profile of you, and we do not try to identify you from them. Under the GDPR, our basis for this is legitimate interest in operating and securing our own website.
We do not sell your information
Nestera Health has not sold personal information and has not shared personal information for cross-context behavioral advertising, in the preceding twelve months or at any point before that. We do not intend to start. We do not run advertising, we do not participate in ad networks, and we do not trade contact data with anyone.
Because we do not sell or share personal information, there is no "Do Not Sell or Share My Personal Information" opt-out to offer you. If that ever changes, this policy will change first.
Who we disclose information to
We disclose personal information only to the service providers that make our own operations work, and only for that purpose. Today that means our website host, our email provider, and our scheduling provider. They are permitted to use the information to provide their service to us and for nothing else.
We may also disclose information if we are legally required to, or if we need to protect our rights, our safety, or the security of our systems. If our business is ever sold or merged, information may transfer as part of that transaction, and this policy continues to apply until it is replaced by one you are told about.
How long we keep things
- Server logs: no longer than 30 days, then deleted or aggregated into counts that cannot identify anyone.
- Email you send us: kept while we are in contact and for up to 24 months after our last exchange, unless we need it longer for a contract or a legal obligation.
- Demo requests, meeting notes, and the update list: kept for the length of the business relationship, and up to 24 months after it ends or after you unsubscribe.
- Theme preference: stored on your device until you clear your browser data. We never receive it.
When a retention period ends, we delete the information or strip it of anything that could identify a person.
Your rights
Depending on where you live, you may have the right to ask us for a copy of the personal information we hold about you, to correct it, to delete it, to limit or object to how we use it, or to receive it in a portable format. California residents may also ask what categories of information we collected in the last twelve months and who we disclosed it to.
To exercise any of these, email us at founders@nesterahealth.com. We will respond within the time the applicable law requires, generally 30 to 45 days. We will not treat you differently for asking. In practice, if you have never emailed us, the only record we are likely to hold is a short-lived server log entry that we cannot connect to you by name.
If you are in the EEA or the UK and you think we have handled your information badly, you may complain to your local data protection authority.
Where your information is handled
Nestera Health operates in the United States, and information sent to us is processed there. If you are visiting from outside the United States, be aware that US privacy law differs from the law where you live.
Changes to this policy
If we change how this site handles information, for example by adding analytics or a contact form, we will update this page and change the date at the top before the change takes effect.
Contact
Questions about this policy, or about privacy at Nestera Health generally, go to founders@nesterahealth.com.