1. Information We Collect

We collect information you provide directly to us, including:

Account information: name, email address, and password
Practice information you publish on your site: bio, specialties, fees, insurance, license details, photos, and any other content you choose to add
Payment information: processed securely via Stripe — we never store card details
Usage data: how you interact with the Service to improve the product

Willow Practice is a publishing tool, not an electronic health record. Do not enter any client-identifying information or Protected Health Information (PHI) into the Service. Willow Practice is not a HIPAA Business Associate and is not designed to store PHI.

2. How We Use Your Information

We use the information we collect to:

Provide, operate, and improve the Service
Send transactional emails (account confirmations, billing receipts, password resets)
Respond to your questions and support requests
Protect against fraud and abuse

We do not sell your personal information to third parties. We do not use your practice content for advertising.

3. Data Storage and Security

Your data is stored securely on encrypted servers. We use industry-standard security practices including HTTPS encryption for all data in transit and encrypted storage for data at rest. Passwords are hashed and never stored in plain text.

4. Public vs. Private Information

Content you publish on your Willow Practice site (bio, specialties, fees, photos, etc.) is public by design — it appears at willow-practice.com/@yourhandle or your custom domain so prospective clients can find you. Account-level information (email, billing details) is never shown publicly.

5. Third-Party Services

We use a limited number of trusted third-party services to operate Willow Practice:

Stripe — payment processing. Subject to Stripe's Privacy Policy.
Resend — transactional email delivery.

These services only receive the minimum data necessary to perform their function.

6. Data Retention

We retain your data for as long as your account is active. If you cancel or delete your account, your data is kept for 90 days before permanent deletion, giving you time to export anything you need. You can request immediate deletion by contacting us.

7. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Export your published site content

To exercise any of these rights, contact us at jake@willow-practice.com.

8. Cookies

We use a single session cookie to keep you logged in. We do not use tracking cookies or third-party advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email. The date at the top of this page reflects the most recent revision.

10. Contact

Questions about this policy? Reach us at jake@willow-practice.com.