PRIVACY POLICY

Debrief Recovery LLC ("Debrief Recovery," "we," "us," or "our") operates the website debriefrecovery.com and provides recovery studio services in Norwood, Massachusetts. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, use our services, or communicate with us.

By using our website or services, you agree to the collection and use of information in accordance with this policy.

INFORMATION WE COLLECT

Information You Provide Directly

When you fill out forms on our website, book an appointment, or contact us, we may collect:

• Name — to personalize your experience and communications
• Email address — for appointment confirmations, follow-ups, and service communications
• Phone number — for SMS appointment reminders and booking confirmations (only with your explicit consent)
• Recovery goals — what brings you to Debrief (e.g., athletic recovery, stress relief, pain management) to help us personalize your visit
• Health information — if voluntarily provided in intake forms, to ensure your safety during services

Information Collected Automatically

When you visit our website, we automatically collect certain technical information including:

• Pages visited and time spent on each page
• Browser type and operating system
• Referring URLs and general geographic location (city/region level)
• Device type (desktop, mobile, tablet)

This data is collected via the Kulltivate analytics pixel embedded on our site (see "Analytics" section below).

AI Chatbot Conversations

Our website features an AI-powered chatbot ("Ask Debrief AI") to help answer questions about our services, pricing, and recovery modalities. Conversations with this chatbot may be stored and reviewed by our team for the purpose of improving the chatbot's responses and our overall service quality. Please do not share sensitive personal or medical information in chatbot conversations.

HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

• Appointment booking and management — scheduling, confirming, and managing your sessions via Google Calendar integration
• Communications — responding to inquiries, sending appointment reminders, and following up after your visit
• SMS notifications — sending text messages related to your appointment or inquiry (only if you have provided explicit consent)
• Service improvement — analyzing how visitors use our site and chatbot to make our services better
• Safety — understanding your recovery goals and health considerations to keep you safe during services
• Legal compliance — meeting our obligations under applicable law

SMS / TEXT MESSAGE CONSENT

If you provide your mobile phone number and check the SMS consent box on our intake or intro form, you agree to receive text messages from Debrief Recovery LLC at the phone number provided. These messages may include:

• Appointment confirmations and reminders
• Follow-up messages related to your inquiry
• Important updates about your bookings

Message frequency varies. Message and data rates may apply. You can opt out at any time by replying STOP to any text message you receive from us. For help, reply HELP. Opting out will not affect your ability to use our services.

ANALYTICS

Our website uses the Kulltivate analytics pixel, a first-party analytics tool that helps us understand how visitors interact with our website. This pixel collects anonymized usage data including page views, session duration, and navigation patterns. This data is used solely for internal analysis to improve our website and services and is not shared with third parties for advertising purposes.

We do not currently use Google Analytics, Facebook Pixel, or other third-party behavioral advertising trackers.

THIRD-PARTY SERVICES

We work with the following trusted third-party service providers to operate our business:

Twilio (SMS Communications)

We use Twilio to send SMS text messages. Your phone number is transmitted to Twilio solely for the purpose of delivering messages you have consented to receive. Twilio's privacy policy is available at their website. Twilio does not use your information for their own marketing purposes.

Google Calendar

Appointment bookings are managed through Google Calendar. When you book a session, your name, email, and selected appointment time are used to create a calendar event. Google's privacy policy governs their handling of this data.

Payment Processors

If payment processing is required for services, we use third-party payment processors that are PCI-DSS compliant. We do not store your full credit card number on our servers.

Vercel

Our website is hosted on Vercel. Vercel may collect basic server logs including IP addresses for security and operational purposes.

COOKIES

Our website uses minimal cookies necessary for site operation, including session cookies that expire when you close your browser. The Kulltivate analytics pixel may set a first-party cookie to distinguish unique visitors and sessions. We do not use third-party tracking cookies for advertising.

You can configure your browser to refuse all cookies or to alert you when cookies are being sent. Note that some parts of our website may not function properly without cookies.

DATA RETENTION AND DELETION

We retain your personal information for as long as necessary to provide our services, comply with legal obligations, and resolve disputes. Specifically:

• Contact form submissions and appointment records are retained for up to 3 years
• AI chatbot conversation logs are retained for up to 1 year
• Analytics data is retained in aggregate and anonymized form indefinitely

You may request deletion of your personal information at any time by emailing us at info@debriefrecovery.com. We will process deletion requests within 30 days. Please note that we may be required to retain certain information for legal or tax purposes.

DATA SECURITY

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include HTTPS encryption for all data transmission and access controls limiting who can view your information.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

CALIFORNIA PRIVACY RIGHTS (CCPA)

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), including:

• Right to Know — the categories and specific pieces of personal information we have collected about you
• Right to Delete — request deletion of your personal information, subject to certain exceptions
• Right to Opt-Out — we do not sell personal information, so this right does not currently apply
• Right to Non-Discrimination — exercising your privacy rights will not result in different service or pricing

To exercise any of these rights, contact us at info@debriefrecovery.com.

CHILDREN'S PRIVACY

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will delete it.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date. We encourage you to review this policy periodically.

CONTACT US

If you have questions, concerns, or requests related to this Privacy Policy, please contact us: