Privacy Policy

    Your privacy matters to us.

    Effective Date: February 18, 2026

    1. Introduction

    ValorWell ("we," "us," or "our") is a mental health services organization serving veterans, military families, and clinicians. We are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, store, share, and protect your data when you use our website and services.

    If you have any questions about this policy, please contact us at info@valorwell.org.

    2. Information We Collect

    We may collect the following categories of information:

    • Account and Profile Information: Name, email address, phone number, and professional credentials (for clinicians).
    • Protected Health Information (PHI): For clients receiving therapy or support services, we collect health-related information necessary to provide care, in compliance with HIPAA.
    • Usage Data and Analytics: We use Google Analytics and Google Ads conversion tracking to understand how visitors interact with our website. This data is collected in aggregate and does not personally identify individual users.

    3. Google User Data

    ValorWell's electronic health record (EHR) platform integrates with Google Calendar to enable appointment syncing for clinicians. This section describes how we handle Google user data accessed through Google's OAuth 2.0 authorization flow.

    Data Accessed

    When a clinician connects their Google account, ValorWell requests access to the following Google API scopes:

    • calendar.events — Read and write calendar events for appointment syncing between the ValorWell EHR and the clinician's Google Calendar.
    • calendar.calendarlist.readonly — Read the clinician's calendar list to allow them to select which calendar to sync.
    • calendar.events.freebusy — Read free/busy status to determine scheduling availability.

    Data Usage

    Google Calendar data is used solely to synchronize clinician appointments between the ValorWell EHR platform and the clinician's Google Calendar. We do not use Google user data for any other purpose, including advertising, analytics, or profiling.

    Data Sharing

    Google user data is not shared with any third parties. Data flows directly between Google's API and the ValorWell application. No intermediaries, advertising networks, or data brokers have access to Google user data.

    Data Storage and Protection

    Calendar sync data is stored in a secure, cloud-hosted database with the following protections:

    • Encryption at rest and in transit (TLS/HTTPS)
    • Row-level security ensuring clinicians can only access their own data
    • Authentication required for all data access

    Data Retention and Deletion

    Google Calendar sync data is retained only while a clinician is actively employed or contracted with ValorWell. Upon separation from ValorWell, their synced calendar data is deleted. Clinicians may also request deletion of their Google Calendar data at any time by contacting info@valorwell.org.

    Compliance with Google API Services User Data Policy

    ValorWell's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

    4. Protected Health Information (PHI)

    ValorWell collects and handles Protected Health Information in compliance with the Health Insurance Portability and Accountability Act (HIPAA). PHI is used solely for the purpose of providing mental health care services.

    Retention: PHI is retained for 10 years after the last date of activity on a client's account, in accordance with medical recordkeeping requirements.

    Deletion: Clients may request deletion of their data by contacting info@valorwell.org. Deletion requests are honored subject to applicable legal retention obligations.

    5. How We Use Information

    We use the information we collect to:

    • Provide and improve mental health services to our clients
    • Synchronize clinician calendars for scheduling and appointment management
    • Analyze website traffic and measure the effectiveness of outreach campaigns (Google Analytics, Google Ads)
    • Communicate with users about our services

    6. Data Sharing

    • We do not sell user data.
    • We do not share Google user data with any third parties.
    • We may share de-identified, aggregated analytics data for reporting purposes.
    • We may disclose information when required by law or to comply with legal process.

    7. Data Security

    We implement appropriate technical and organizational measures to protect your data, including:

    • Encryption in transit (TLS/HTTPS) and at rest
    • Row-level security on our database to isolate user data
    • Access controls and authentication for all systems

    8. Your Rights

    You have the right to:

    • Request access to the personal data we hold about you
    • Request deletion of your personal data (subject to legal retention requirements)
    • Withdraw consent for Google Calendar integration at any time

    To exercise any of these rights, please contact us at info@valorwell.org.

    9. Changes to This Policy

    We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

    10. Contact Us

    If you have any questions or concerns about this Privacy Policy, please contact us at: info@valorwell.org