Privacy Policy

Orchard Neuro, PBC ("Orchard," "we," "us") built the Orchard Profile for people navigating depression care, and we hold your information to the standard that deserves. This policy explains what we collect on this website, how we use it, and the choices you have. It is written to be read.

One thing before everything else: joining our waitlist or reserving a spot does not create a clinical relationship, and the information you provide at those stages is not medical-record information. If you later purchase a Profile, your clinical information is protected health information handled under HIPAA, and you will receive a separate Notice of Privacy Practices at intake that governs it.

What we collect, stage by stage

When you join the waitlist: your first name, email address, and state of residence. Optionally, and only if you choose to answer, one question about your situation (for example, "I've tried more than one medication"). Because that answer relates to your health, we treat it as consumer health data: we ask for it only with your consent, we store it separately, and we never share it with advertising platforms.

When you reserve a spot: the above, plus payment. Payments are processed by Stripe; we never see or store your card number. We receive confirmation of payment, the amount, and your reservation details.

When you visit the site: standard technical data (browser type, pages viewed, approximate region) and, if you arrived from an ad or link, campaign identifiers (such as a click ID) that tell us which ad brought you here. We use privacy-respecting analytics to understand how the site is used.

When you email or reply to us: the contents of your message, so we can respond.

What we use it for

• Running the waitlist and reservations: your place in line, state-by-state availability, receipts, and refunds.
• Sending you the emails you signed up for: your position, educational content about depression care, and founding-cohort updates. Every email has a one-tap unsubscribe.
• Understanding what's working: aggregate analytics on pages, campaigns, and signups.
• Meeting our legal obligations and enforcing our terms.

What we will not do

• We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
• We never send health-related information to advertising platforms. Ad conversion events we report (such as "a signup occurred") carry no health status, no survey answers, and no clinical information.
• We do not use your information to train models or for research without your separate, explicit opt-in consent, which is never a condition of receiving any service.
• We do not knowingly collect information from anyone under 18. This site and service are for adults.

Who we share it with

Only service providers who help us operate, bound by contract to use your data solely for our instructions: payment processing (Stripe), email delivery, website hosting, and analytics. We disclose information if the law genuinely requires it, and if Orchard is ever part of a merger or acquisition, this policy's protections travel with your data and we will notify you of any change.

One exception worth naming plainly: measuring our ads. When you arrive from one of our ads, Google attaches its own identifier to that click. If you go on to reserve a spot, we report to Google Ads that a purchase happened, what it was worth, and that identifier, so we can tell which ads are worth running. That report carries no name, no email address, no phone number, and nothing about your health. It happens whether or not you accept the cookie banner, because the identifier describes the ad click rather than you. If you would rather we did not report your purchase this way, email privacy@orchardneuro.co and we will stop.

Consumer health data

For the optional health-related question described above, and as required by laws including Washington's My Health My Data Act: we collect it only with your consent, use it only to understand our community and tailor what we send you, share it only with the service providers above (never for advertising), and delete it on request. Consent may be withdrawn at any time by emailing privacy@orchardneuro.co.

Your rights and choices

Wherever you live, we honor these on request: access what we hold about you, correct it, delete it, unsubscribe from marketing, and withdraw consent for the optional health question. California residents have these rights under the CCPA/CPRA, and we do not discriminate against anyone for exercising them. We honor the Global Privacy Control signal. To exercise any right: privacy@orchardneuro.co. We respond within 30 days, and we verify requests to protect your data from impersonation.

Retention and security

We keep waitlist and reservation data while your signup or reservation is active and for a reasonable period afterward, then delete or de-identify it. Consumer health data is deleted on request or when no longer needed. We protect data in transit and at rest with encryption and restrict access to the people who need it to serve you.

Changes and contact

If this policy changes materially, we'll email you before the change takes effect. Contact: privacy@orchardneuro.co, or Orchard Neuro, PBC, 118 Connecticut St C, San Francisco, CA, 94107.

If you are in crisis, call or text 988 (US). Orchard is not an emergency service.