Privacy Policy | AnchorWellPress

This Privacy Policy describes how AnchorWellPress ("we," "us," "our," or "Company") collects, uses, stores, and protects your personal information when you visit our website at www.anchorwellpress.com or use any of our AI-powered health education tools ("Services"). By using our Services, you consent to the practices described in this Privacy Policy.

AnchorWellPress is owned and operated by Archana Laxmisan, MD, MA, CHCQM, based in San Diego, California.

1. Information We Collect

A. Information You Provide Directly

Account information (name, email address) — collected when you create an account via Clerk for authentication and account management
Payment information (card details, billing address) — collected and processed securely by Stripe when you subscribe to premium tools
Health-related inputs (insurance details, conditions, medications) — entered when you use our AI tools, processed in real-time to generate educational responses
Email address — collected when you subscribe to our newsletter or contact us for support

B. Information Collected Automatically

Usage analytics (pages visited, features used, session duration) — collected by PostHog and Vercel Analytics for product improvement
Device information (browser type, operating system, screen size) — collected via standard web logs for compatibility and debugging
IP address — collected by web server logs and Cloudflare for security and fraud prevention
Cookies and local storage — used for authentication, preferences, and beta access (see Section 4 for details)

C. Information We Do NOT Collect

We prioritize your health privacy and do not collect or permanently store:

Protected Health Information (PHI): We do not store medical records, diagnoses, or health conditions on our servers
Sensitive identifiers: Social Security Numbers, medical record numbers, insurance member IDs, or government-issued ID numbers
Biometric or precise location data: No fingerprints, facial recognition, or GPS coordinates

2. How We Use Your Information

Providing Services: Processing your requests through our AI tools and delivering educational health insurance content
Account Management: Creating and maintaining your user account, managing subscriptions, and processing payments
Service Improvement: Analyzing usage patterns to improve features, fix issues, and develop new tools
Communications: Sending transactional emails (account confirmations, payment receipts) and, with your consent, product updates
Security: Detecting and preventing fraud, abuse, and unauthorized access via Cloudflare WAF and bot protection
Legal Compliance: Complying with applicable laws, regulations, and legal processes

We do NOT: Sell your personal information to third parties. We do not use your health-related inputs to train AI models. We do not share your data for advertising purposes.

3. Health-Related Data Handling

IMPORTANT: AnchorWellPress is NOT a covered entity under HIPAA. We are an educational platform, not a healthcare provider. However, we take your health-related inputs seriously and handle them with care.

How health-related inputs are processed:

Health information you enter is sent to the Anthropic Claude API via our secure server-side proxy (/api/analyze)
Data is encrypted in transit using HTTPS/TLS
Your inputs are processed in real-time to generate educational responses
We do not persistently store your health-related inputs in our database
AI responses may be temporarily cached (up to 24 hours) to improve performance, but cached data does not contain personally identifiable information linked to your account

What we recommend:

Do not enter Social Security Numbers, medical record numbers, or insurance member IDs into our tools
Use general descriptions rather than highly specific personal identifiers
Review our Terms of Service Section 10 (HIPAA Disclaimer) for additional details

4. Cookies & Tracking Technologies

We use the following cookies and tracking technologies:

Cookie / Technology	Type	Purpose	Duration
Clerk session cookies	Essential	User authentication and session management	Session / 30 days
awp_beta_access	Functional	Beta testing access verification	30 days
Stripe cookies	Essential	Secure payment processing, fraud prevention	Varies
PostHog analytics	Analytics	Usage tracking, feature analytics	1 year
Cloudflare cookies	Security	Bot protection, DDoS mitigation	Varies

No Advertising Cookies: We do not use cookies for advertising, cross-site tracking, or behavioral profiling.

Managing cookies:

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using features such as logging in or making payments. Analytics cookies can be blocked without affecting core functionality.

5. Third-Party Service Providers

We share information with the following service providers who help us operate our Services. Each has its own privacy policy:

Anthropic (AI Processing)

Processes user queries via the Claude API and generates educational responses. Conversations handled per Anthropic's privacy policies.

anthropic.com/privacy

Stripe (Payment Processing)

Handles all payment transactions. PCI DSS Level 1 compliant. We never store full credit card numbers on our servers.

stripe.com/privacy

Clerk (Authentication)

Manages user account creation, authentication, and identity verification.

clerk.com/privacy

Vercel (Hosting & Infrastructure)

Hosts our application with enterprise-grade security. Collects server logs and provides web analytics.

vercel.com/legal/privacy-policy

PostHog (Product Analytics)

Collects usage analytics (pages visited, features used, session duration) for product improvement. Analytics are collected only after you consent via our cookie banner. When you are logged in and have consented, your usage may be linked to your account for personalized analytics. You can opt out at any time via the cookie settings.

posthog.com/privacy

Microsoft Clarity (Behavior Analytics)

What: Session replay recordings and heatmaps that show how visitors interact with our tools (clicks, scrolls, page navigation patterns).

Why: To identify usability issues and improve our health tools based on real usage patterns.

Data: Anonymized interaction data only. Clarity does not collect personally identifiable information or health data entered into our tools. All text input fields are masked.

Retention: Session data is retained by Microsoft for up to 30 days.

microsoft.com/privacy

Cloudflare (CDN, Security & DNS)

Provides content delivery, Web Application Firewall (WAF), DDoS protection, and DNS management. Processes IP addresses and traffic data.

cloudflare.com/privacypolicy

Resend (Transactional Email)

Delivers transactional emails such as password resets and subscription confirmations.

resend.com/legal/privacy-policy

Important: We encourage you to review the privacy policies of each third-party service. We are not responsible for their privacy practices.

6. Data Sharing & Disclosure

What We Do NOT Do:

We do NOT sell your personal data to third parties
We do NOT share data with marketing companies or advertisers
We do NOT rent or lease your information
We do NOT use your health data to train AI models

We only share information with the service providers listed in Section 5 under strict confidentiality agreements. We may disclose information if required by law, court order, or government request, or to protect the rights, property, or safety of AnchorWellPress, our users, or the public.

7. Data Security

We implement reasonable technical and organizational measures to protect your personal information:

HTTPS Encryption: All data transmitted between your browser and our servers is encrypted via HTTPS/TLS
Server-Side API Keys: All API keys and secrets are stored in server-side environment variables and never exposed to client browsers
Cloudflare WAF: Web Application Firewall protects against common web attacks and malicious traffic
Bot Protection: AI training bots are blocked from scraping our content
Authentication Security: Clerk provides industry-standard authentication practices
Payment Security: Stripe is PCI DSS Level 1 compliant. We never store full credit card numbers on our servers

While we implement strong security measures, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security but maintain industry-standard protections.

8. Data Retention

Data Type	Retention Period	Notes
Account data	Duration of account	Deleted upon account closure, subject to legal retention requirements
Payment records	7 years	Required by tax and financial regulations. Managed by Stripe
Health-related inputs	Not retained	Processed in real-time and not stored after your session
Cached AI responses	Up to 24 hours	Performance optimization only. No PII linked
Analytics data	~12 months	Managed by PostHog per their retention policies
Server logs	Up to 30 days	Security and debugging purposes
Email communications	As needed	Retained to provide support and comply with legal obligations
localStorage data	Duration of browser session or until manually cleared	Stores user preferences, beta feedback, and email for convenience. Users can clear anytime in browser settings
API query data	Not retained	Stateless API requests - no storage of query data or responses on our servers

Privacy by Design: We minimize data collection at the source. When you use AnchorWellPress tools, your health information is processed in real-time and never stored on our servers.

Requesting Data Deletion

Users have the right to request deletion of their personal data at any time. To request deletion:

Account Deletion: Email us at anchorwellpress@gmail.com with your request
localStorage Clearing: You can manually clear browser storage through your browser settings
Analytics Opt-out: Disable analytics tracking using browser privacy settings or ad blockers

We will process deletion requests promptly, subject to any legal retention obligations. Please note that some data (such as payment records) may be retained for legal or regulatory compliance purposes.

9. Your Privacy Rights

All Users

Regardless of your location, you may:

Access and update your account information through your Clerk profile settings
Unsubscribe from marketing emails using the link in any email we send
Request deletion of your account by emailing us
Opt out of analytics tracking by using browser privacy settings or ad blockers

Right to Access

Request a copy of your personal information.

Right to Deletion

Request deletion of your personal information, subject to legal obligations.

Right to Correction

Request correction of inaccurate information.

Right to Data Portability

Request your data in a portable format.

To Exercise Your Rights: Contact us at anchorwellpress@gmail.com. We aim to respond within 30 days.

10. California Privacy Rights (CCPA/CPRA)

AnchorWellPress does NOT sell, rent, or trade personal information. We do not share your data with third parties for cross-context behavioral advertising.

If You Are a California Resident

The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) grant you specific rights:

Right to Know what personal information is collected, used, shared, and sold
Right to Delete personal information collected from you (subject to legal exceptions)
Right to Correct inaccurate personal information
Right to Opt-Out of Sale/Sharing — AnchorWellPress does not sell personal information, so this right is not currently applicable. If this changes, we will provide a "Do Not Sell or Share My Personal Information" mechanism
Right to Limit Use of Sensitive Information to what is necessary to provide our Services
Right to Non-Discrimination for exercising your CCPA/CPRA rights

To Exercise Your California Rights: Contact us at anchorwellpress@gmail.com with "CCPA Request" or "CPRA Request" in the subject line. We will verify your identity and respond within 45 days as required by law. You may also designate an authorized agent to make a request on your behalf.

Other State Privacy Laws

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states with comprehensive privacy laws may have similar rights. Please contact us to exercise any rights available under your state's privacy law.

11. Children's Privacy

AnchorWellPress is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at anchorwellpress@gmail.com and we will take steps to delete that information.

Users between the ages of 13 and 18 may use AnchorWellPress with the consent and supervision of a parent or legal guardian, as described in our Terms of Service.

12. Do Not Track Signals

Some web browsers transmit "Do Not Track" (DNT) signals. Because there is no industry-standard interpretation of DNT signals, AnchorWellPress does not currently alter its data collection and use practices based on DNT signals. We will update this policy if a standard for DNT signals is established.

13. International Users

AnchorWellPress is operated from the United States. If you access our Services from outside the United States, your information may be transferred to, stored, and processed in the United States where our servers and service providers are located. By using our Services, you consent to the transfer of your information to the United States.

Data protection laws in the United States may differ from those in your country of residence. We will take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

Update the "Last Updated" date at the top of this page
Post a notice on our website for significant changes
Notify registered users via email for changes that materially affect how we handle personal information

Your continued use of AnchorWellPress after changes constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions about this Privacy Policy, your personal information, or wish to exercise your privacy rights:

Email: anchorwellpress@gmail.com

Service Provider: AnchorWellPress

Owner: Archana Laxmisan, MD, MA, CHCQM

Website: www.anchorwellpress.com

We aim to respond to all privacy-related inquiries within 10 business days.

16. Conflict of Interest Disclosure

In the interest of full transparency, we disclose the following potential conflict of interest:

Dr. Archana Laxmisan, the founder and owner of AnchorWellPress, holds a position at Sharp Rees-Stealy Medical Group. This dual role represents a potential conflict of interest, as recommendations or content on AnchorWellPress may be influenced by Dr. Laxmisan's professional affiliations.

AnchorWellPress is independently operated and is not endorsed by or affiliated with Sharp Rees-Stealy Medical Group. All content, clinical decision support tools, and health information provided on AnchorWellPress are developed independently according to our privacy practices and clinical standards, not on behalf of Sharp Rees-Stealy Medical Group.

Users should be aware of this relationship and make independent decisions regarding the use of AnchorWellPress. If you have concerns about this conflict of interest, please contact us at anchorwellpress@gmail.com.

Your Privacy Matters

We are committed to protecting your privacy and maintaining your trust. AnchorWellPress is designed with privacy at its core — we collect only what we need, we never sell your data, and we handle health-related inputs with the care they deserve.

If you do not agree with our privacy practices, please refrain from using AnchorWellPress.