Privacy Policy

Effective: July 7, 2026

Herbalmedicine.ai ("we," "our," "us") is operated by Eclectic School of Herbal Medicine LLC. This policy describes what information the Service collects, how it is used, and the choices you have.

What we collect

Account information. When you create an account or sign in, we receive your email address and name from the sign-in provider you use (such as Google) or from your purchase on our website.

Billing information. Subscriptions are purchased through our website's checkout. Payment card details are handled by our payment processor and are not stored on our servers. We keep records of your subscription status and tier.

Your conversations. The questions you ask and the answers you receive are stored so that your conversation history is available to you across sessions. Files you attach to a conversation (including lab reports) are also stored.

Basic technical logs. Like most web services, our infrastructure records routine technical information (such as request logs and error logs) needed to operate and debug the Service.

How your information is used

We use your information to run the Service: to authenticate you, maintain your conversation history, generate answers to your questions, and manage your subscription. We do not sell your information. We do not use your conversations for advertising.

Where answers come from

To generate an answer, the content of your conversation is sent to third-party AI model providers over their programming interfaces. Some providers may process data outside the United States.

Before an uploaded document is stored or sent to a model provider, we run an automated redaction pass that removes common identifiers from it: patient-name header lines, dates of birth (replaced with age), record and account numbers, Social Security numbers, phone numbers, email addresses, and street addresses. The attachment view shows you what was removed. This applies to uploaded documents only; it does not scan the text you type, and automated patterns cannot catch every identifier, so do not enter client-identifying information.

Our infrastructure providers store data on our behalf, currently including Supabase (database, authentication, file storage) and Netlify (hosting and serverless functions).

What you should not put into the Service

The Service is not HIPAA-compliant, and we make no claim that it is. If you are a practitioner, do not enter client-identifying information. Conversations about health topics should be framed without names, birthdates, or other identifying details.

Retention and deletion

Your conversations and attachments are retained while your account is active so your history remains available. You may request deletion of your account and its data by emailing us at the address below, and we will act on the request within a reasonable time.

Your choices and rights

You can request a copy of the information we hold about you, ask us to correct it, or ask us to delete it by contacting us at the address below.

Age

The Service is intended for adults. It is not directed at children under 13, and we do not knowingly collect information from them.

Changes to this policy

If this policy changes, we will update this page and revise the date at the top. Material changes will be noted plainly.

Contact

Questions about this policy or requests concerning your data: ai@eclecticschoolofherbalmedicine.com.