This Privacy Policy describes how AuraC2 LLC, doing business as Aura Meds ("Company," "we," "our," or "us"), collects, uses, discloses, and protects information when you access or use our websites, patient portal, telehealth platform, mobile applications, forms, communications, products, and services (collectively, the "Services").
By using the Services, you acknowledge that you have read and understand this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Services.
1. Important Notice Regarding Medical Information
Some information we collect may be considered health information, medical information, or protected health information under applicable laws, including the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations ("HIPAA"), where applicable.
To the extent we maintain protected health information on behalf of a covered health care provider, that information may also be subject to a separate Notice of Privacy Practices provided by the applicable provider or medical practice. If there is a conflict between this Privacy Policy and an applicable Notice of Privacy Practices with respect to protected health information, the Notice of Privacy Practices will control.
This Privacy Policy applies to information collected by Aura Meds through the Services. It does not apply to websites, applications, pharmacies, laboratories, payment processors, or other third parties that we do not own or control.
2. Information We Collect
We may collect information directly from you, automatically through your use of the Services, from health care providers, pharmacies, laboratories, service providers, business partners, and other sources.
A. Information You Provide
We may collect information you submit through intake forms, account registration, medical questionnaires, checkout pages, patient portal messages, customer support communications, identity verification, or other interactions with the Services, including:
- Name, date of birth, gender, address, email address, phone number, and account credentials.
- Health and medical information, including symptoms, medical history, medications, allergies, lab results, diagnoses, treatment goals, lifestyle information, height, weight, photos, and other information relevant to evaluating or providing care.
- Government identification or identity verification information, where required.
- Payment, billing, shipping, and transaction information.
- Communications with us, providers, care coordinators, support teams, or affiliated partners.
- Preferences, consents, authorizations, and survey responses.
B. Information Collected Automatically
When you use the Services, we may automatically collect:
- Device information, including browser type, operating system, device type, IP address, device identifiers, and mobile identifiers.
- Usage information, including pages viewed, links clicked, forms started or completed, session duration, referring URLs, and interactions with emails or advertisements.
- Approximate location information inferred from your IP address.
- Cookies, pixels, tags, SDKs, and similar technologies used to operate the Services, remember preferences, analyze usage, improve performance, prevent fraud, and support advertising or marketing where permitted by law.
C. Information From Third Parties
We may receive information from:
- Licensed health care providers or affiliated medical groups.
- Pharmacies, laboratories, diagnostic testing companies, and fulfillment partners.
- Payment processors and fraud prevention vendors.
- Identity verification providers.
- Advertising, analytics, and marketing partners.
- Referral partners or business partners.
- Publicly available sources or data providers, where permitted by law.
3. How We Use Information
A. To Provide and Operate the Services
- Create, verify, and manage your account.
- Process intake forms, questionnaires, eligibility checks, and telehealth requests.
- Connect you with licensed health care providers.
- Facilitate medical evaluations, prescriptions, treatment plans, lab testing, pharmacy fulfillment, and follow-up care.
- Process payments, subscriptions, refunds, and shipping.
- Provide customer support and respond to inquiries.
- Maintain records related to your care, orders, and communications.
B. To Communicate With You
We may use your information to send:
- Account, transaction, and service-related communications.
- Appointment, treatment, refill, lab, order, and shipping notifications.
- Patient portal messages.
- Administrative notices, policy updates, and security alerts.
- Marketing, promotional, or educational communications, where permitted by law and subject to your opt-out rights.
C. To Improve, Secure, and Personalize the Services
We may use information to:
- Improve website functionality, user experience, clinical workflows, and customer support.
- Analyze usage trends and service performance.
- Detect, prevent, and investigate fraud, misuse, security incidents, or unlawful activity.
- Debug, maintain, and secure our systems.
- Personalize content, recommendations, or communications.
D. For Legal, Compliance, and Business Purposes
We may use information to:
- Comply with applicable laws, regulations, legal processes, and professional obligations.
- Support audits, compliance reviews, quality assurance, and risk management.
- Enforce our Terms and Conditions and other agreements.
- Protect the rights, safety, and property of our users, providers, partners, and Company.
- Evaluate or complete a merger, acquisition, financing, restructuring, sale, or transfer of assets.
4. How We Disclose Information
A. To Health Care Providers and Medical Groups
We may disclose information to licensed health care providers, medical groups, clinicians, and care team members involved in evaluating, treating, or supporting your care.
B. To Pharmacies, Laboratories, and Fulfillment Partners
We may disclose information to pharmacies, laboratories, diagnostic testing providers, shipping providers, and other partners as needed to process prescriptions, lab tests, orders, refills, and related services.
C. To Service Providers
We may disclose information to vendors and service providers that help us operate the Services, including hosting providers, telehealth technology vendors, customer support tools, payment processors, identity verification vendors, analytics providers, email/SMS vendors, security providers, and professional advisors.
These service providers are authorized to use information only as necessary to provide services to us or as otherwise permitted by law.
D. To Payment Processors
Payment information may be collected and processed by third-party payment processors. We do not intentionally store full payment card numbers unless clearly disclosed or required for a specific permitted purpose.
E. For Legal and Safety Reasons
We may disclose information when we believe disclosure is necessary or appropriate to:
- Comply with law, regulation, subpoena, court order, governmental request, or legal process.
- Protect against fraud, abuse, security risks, or technical issues.
- Enforce our agreements and policies.
- Protect the rights, safety, or property of users, providers, the public, or Company.
- Respond to emergencies or threats of harm.
F. In Business Transfers
We may disclose or transfer information in connection with a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar business transaction.
G. With Your Consent or Direction
We may disclose information when you authorize us to do so, including when you request that we share information with another provider, caregiver, pharmacy, laboratory, or other third party.
6. Communications by Email, SMS, Phone, and Portal
By providing your contact information, you authorize us and our partners to contact you regarding the Services, including by email, phone, text message, and patient portal communication.
Service-related communications may include information about your account, intake forms, appointments, prescriptions, treatment plans, orders, refills, payments, shipping, and support requests.
Text messaging and email may not always be secure. You understand that communications may include sensitive information unless you opt out or request an alternative communication method where available.
Message and data rates may apply. You may opt out of promotional text messages by replying STOP and may opt out of promotional emails by using the unsubscribe link. Transactional or service-related communications may still be sent as permitted by law.
7. HIPAA and Protected Health Information
Where applicable, protected health information may be used and disclosed in accordance with HIPAA and the applicable Notice of Privacy Practices. This may include uses and disclosures for treatment, payment, health care operations, legal compliance, public health, safety, and other purposes permitted or required by law.
Examples may include:
- Sharing information with providers for medical evaluation and treatment.
- Sending prescriptions or prescription information to pharmacies.
- Sharing lab orders or results with laboratories and providers.
- Processing payments and billing.
- Supporting quality assurance, compliance, audits, and health care operations.
For more detailed information about how protected health information is used and disclosed, please review the applicable Notice of Privacy Practices.
8. Data Security
We use administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, disclosure, alteration, or destruction. These safeguards may include encryption, access controls, secure hosting, monitoring, authentication, vendor reviews, and internal policies.
However, no method of transmission or storage is completely secure. We cannot guarantee absolute security of information transmitted through the internet, email, SMS, or third-party platforms.
9. Data Retention
We retain information for as long as reasonably necessary to provide the Services, maintain records, comply with legal and regulatory obligations, resolve disputes, enforce agreements, support audits, and fulfill legitimate business purposes.
Retention periods may vary depending on the type of information, applicable laws, medical record requirements, pharmacy or prescription requirements, and business needs.
10. Your Privacy Rights
Depending on where you live and the laws that apply, you may have certain rights regarding your personal information, including the right to:
- Request access to personal information we maintain about you.
- Request correction of inaccurate information.
- Request deletion of certain information.
- Request a copy of certain information in a portable format.
- Opt out of certain targeted advertising, sharing, or sale of personal information.
- Limit certain uses or disclosures of sensitive personal information, where applicable.
- Withdraw consent where processing is based on consent.
- Appeal a decision regarding a privacy request, where required by law.
These rights may be subject to exceptions, including legal, medical record, regulatory, security, fraud prevention, and operational requirements.
To submit a privacy request, contact us at support@tryaurameds.com. We may need to verify your identity before fulfilling your request.
11. State-Specific Privacy Rights
Residents of certain states, including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and other states with consumer privacy laws, may have additional rights.
Depending on applicable law, you may have the right to know what categories of personal information we collect, the categories of sources, the purposes for collection, the categories of recipients, whether information is sold or shared, and how to opt out of certain processing.
Where required, we will honor legally recognized browser-based opt-out signals, such as Global Privacy Control, for the browser or device used to send the signal.
12. California Privacy Notice
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, may provide specific rights regarding your personal information.
Categories of Personal Information We May Collect
We may collect the following categories of personal information:
- Identifiers, such as name, email, phone number, address, IP address, account ID, and device identifiers.
- Personal information described in California Civil Code Section 1798.80, such as contact, payment, and identity information.
- Protected classification characteristics, where provided or relevant to care.
- Commercial information, such as products or services purchased, obtained, or considered.
- Internet or electronic network activity information.
- Geolocation information, such as approximate location inferred from IP address.
- Audio, electronic, visual, or similar information, such as support calls or submitted images, where applicable.
- Professional or employment-related information, if provided.
- Sensitive personal information, including health information, account login credentials, government identification, precise geolocation if collected, and other sensitive data.
- Inferences drawn from information to personalize or improve the Services.
Purposes for Collection
We collect and use these categories for the purposes described in this Privacy Policy, including providing the Services, facilitating care, processing transactions, communicating with you, improving the Services, security, compliance, and business operations.
Sale or Sharing
We do not sell personal information for money. However, certain analytics or advertising technologies may be considered a "sale" or "sharing" under California law. You may opt out by contacting us at support@tryaurameds.com.
Sensitive Personal Information
We use sensitive personal information only for permitted purposes, including providing services, security, legal compliance, and other purposes permitted by law, unless we provide additional notice and obtain consent where required.
13. Children's Privacy
The Services are not intended for children under the age of 18, unless expressly permitted by us and applicable law with appropriate parental or guardian consent. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to us without appropriate consent, contact us and we will take reasonable steps to delete the information where required.
14. Third-Party Websites and Services
The Services may contain links to third-party websites, applications, pharmacies, laboratories, payment processors, or other services. We are not responsible for the privacy practices, content, or security of third parties. Your interactions with third parties are governed by their own policies and terms.
15. International Users
The Services are intended for individuals located in the United States, unless otherwise stated. If you access the Services from outside the United States, you understand that your information may be processed and stored in the United States, where privacy laws may differ from those in your jurisdiction.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be posted with a revised "Last Updated" date. Your continued use of the Services after changes are posted means you acknowledge the updated Privacy Policy.
17. Contact Us
For questions about this Privacy Policy or our privacy practices, contact us at: