Website Privacy Policy

Who we are, and what this covers

NovaHealth Medical, PLLC is a membership-based Primary Care practice serving patients located in Texas. This policy covers our website at novahealthmed.com and the member portal it hosts.

Your medical information is additionally protected by HIPAA and governed by our Notice of Privacy Practices, which describes how we use and disclose health information as your healthcare provider. This page covers the website itself: what it stores in your browser, what it sends where, and the choices you have.

What we collect

• Account details — your name, email address, and a password (stored only in protected, hashed form by our authentication provider).
• Membership details — ZIP code, date of birth, your chosen plan, and your answers to our eligibility questions.
• Health information you share in the portal — such as your intake form and messages with your care team. This is protected health information under HIPAA and is never used for marketing, analytics, or advertising.
• Payment — handled by Stripe. Card numbers go directly to Stripe; we never see or store them.
• Technical reports — if a page crashes, an error report is sent so we can fix it. These reports are scrubbed: no message content, form values, or web addresses with identifying codes.

What this site stores in your browser

We don't use advertising cookies or cross-site trackers. What we do store, we store for a reason:

If you allow session insights, recordings are fully masked — no text you type, no form values, no images — and they are switched off entirely inside the member portal regardless of your choice, because that is where health information appears on screen. Change your mind any time via Privacy choices in the footer.

Email

We send emails your account needs — confirming your address, password resets, receipts — and a small number of reminders if you start signing up and don't finish. Reminders always include an unsubscribe link and stop immediately once you use it. Emails needed to run your account can't be unsubscribed from, because your account wouldn't work without them. Our emails never contain details about your health.

Service providers we rely on

A small number of providers process data on our behalf, each receiving only what its job requires:

• Supabase — secure database and sign-in.
• Stripe — payments.
• Resend — sending our email.
• Vercel — hosting this website.
• Sentry — crash reports, and performance measurement if you've allowed it.

We do not sell your personal information, and we do not share it with anyone for advertising.

Security

Data is encrypted in transit and at rest, and access to member records is restricted so that each member can see only their own information and staff access is role-based and logged. No system is perfectly secure, but we design ours so that the quiet default is always the private one.

Your choices

• Allow or decline analytics any time via Privacy choices in the footer.
• Unsubscribe from reminder emails with one click, from any reminder.
• Review or correct your information by messaging your care team through the portal.

A few more things

• NovaHealth membership is for adults 18 and older; this site is not directed to children.
• If we change this policy in a way that matters, we'll update the date above and, where the change affects choices you've already made, ask again.
• Questions about this policy or your information? Reach us through the contact options on novahealthmed.com, or message your care team in the portal.