Privacy Policy

Annabelle Health is operated by Plerity LLC, doing business as Annabelle Health ("Annabelle Health," "we," "us"). This Privacy Policy explains what information we collect through our website and platform, how we use it, and the choices you have.

Who this policy covers

This policy applies to visitors to anna.spa and to the practices (and their staff) who use the Annabelle Health platform. Where a practice uses Annabelle Health to manage patient information, that practice is the covered entity and Annabelle Health acts as its business associate under a signed Business Associate Agreement (BAA).

Information we collect

• • Information you provide — your name, practice name, email, phone, and details you submit when you request a demo or contact us.
• • Account and usage information — records of how authorized users interact with the platform, used to operate and secure the service.
• • Protected health information (PHI) — when a practice uses the platform to manage patients, PHI is handled only as permitted by the practice's BAA and applicable law.

How we use information

• • To provide, maintain, and secure the platform and respond to your requests.
• • To communicate with you about demos, your account, and service updates.
• • To meet our legal, security, and contractual obligations, including under HIPAA where applicable.

We do not sell your personal information, and we do not use PHI for any purpose other than providing the service and as permitted by the applicable BAA and law.

How we protect information

We protect information with encryption in transit and at rest, audit logging, and role-based access controls, so that the right people see the right records. We describe our security practices honestly and do not claim certifications we do not hold.

Sharing and service providers

We share information with vendors who help us operate the platform — for example, our payments processor (Stripe) — under agreements that require them to protect it. We may disclose information when required by law or to protect our rights and the safety of others.

Connecting your Google Calendar

If you choose to connect your Google Calendar, Annabelle Health asks your permission to view and manage events on the Google Calendar you authorize. We use this access only to add and update your Annabelle Health appointments as events on your calendar, and to read your existing busy times so the booking system does not double-book you. We request only the Google Calendar permissions needed for those two functions. Your authorization is stored encrypted, is used solely for the calendar sync described here, and can be revoked at any time from Settings then Integrations.

Annabelle Health's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not sell Google user data, do not use it for advertising, and do not share it with third parties except as needed to provide the calendar-sync feature or as required by law.

Cookies and analytics

Our website uses cookies and privacy-respecting analytics to understand how the site is used and to improve it. You can control cookies through your browser settings.

Data retention and your choices

We retain information for as long as needed to provide the service and to meet our legal obligations. Practices own their data and can export it at any time. To ask about the information we hold, or to request access or deletion, contact us using the details below.

Children's privacy

The Annabelle Health website and platform are intended for businesses and are not directed to children. We do not knowingly collect personal information from children through the website.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "last updated" date above.

Contact us

Questions about this policy? Email [email protected]. Annabelle Health is operated by Plerity LLC, d/b/a Annabelle Health.