Privacy Policy
Last updated: March 21, 2026
1. Introduction
Recovery Journey ("we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website at recoverjourney.com or use our platform services.
2. Information We Collect
We collect information that you provide directly to us, including:
- Name, email address, phone number, and organization details when you request a demo or contact us
- Account information when you register for our platform
- Billing and payment information processed through secure third-party payment processors
- Communications you send to us via email, forms, or support channels
We also collect certain information automatically when you visit our website, including IP address, browser type, operating system, referring URLs, and pages visited. We use cookies and similar technologies for analytics and to improve your experience.
3. Protected Health Information
As a HIPAA-compliant platform, we may process Protected Health Information (PHI) on behalf of our covered entity customers. PHI is handled in accordance with HIPAA regulations and applicable Business Associate Agreements. We do not use PHI for marketing purposes and access is strictly limited to authorized personnel for operational purposes only.
4. How We Use Your Information
- To provide, maintain, and improve our platform services
- To process demo requests and communicate about our services
- To send administrative notifications such as service updates and security alerts
- To respond to your inquiries and provide customer support
- To comply with legal obligations and enforce our terms
- To analyze usage patterns and improve our website and services
5. Data Sharing
We do not sell, rent, or trade your personal information to third parties. We may share information with trusted service providers who assist in operating our platform, subject to confidentiality obligations. We may disclose information when required by law or to protect rights, safety, or property.
6. Data Security
We implement administrative, technical, and physical safeguards to protect your information, including AES-256 encryption at rest, TLS 1.3 encryption in transit, role-based access controls, comprehensive audit logging, and regular security assessments. While we strive to protect your data, no method of transmission or storage is completely secure.
7. Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. PHI is retained in accordance with applicable healthcare regulations and our Business Associate Agreements. Upon account termination, data is retained for 90 days before secure deletion.
8. Your Rights
You have the right to access, correct, or delete your personal information. You may opt out of marketing communications at any time. To exercise these rights, contact us at privacy@recoverjourney.com. We will respond to your request within 30 days.
9. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and updating the effective date. Your continued use of our services after changes are posted constitutes acceptance of the revised policy.
11. Contact Us
If you have questions about this Privacy Policy or our privacy practices, contact us at:
Recovery Journey
Email: privacy@recoverjourney.com