Privacy Policy

Effective: [INSERT DATE]
Last Updated: [INSERT DATE]

This Privacy Policy explains how Sage Ally LLC ("SageAlly," "we," "us," or "our") handles information about you when you visit sageally.health, interact with our advertising, contact us, or use our patient advocacy and care coordination services. By using our website or services, you agree to the practices described here.

If anything in this policy is unclear or you'd like to exercise a right described below, write to us at support@sageally.health.

About SageAlly

SageAlly is a patient advocacy and care management business operated by Sage Ally LLC, a New Jersey limited liability company. We help patients, families, and caregivers navigate the healthcare system and coordinate care. Our services are delivered through a supervising physician entity and billed to Medicare or other insurance. The advocates and coordinators who provide our services are board-certified and credentialed where applicable.

Our principal address is 411 Boulevard of the Americas, Suite 109, Lakewood, NJ 08701.

Two Different Privacy Frameworks Apply to Us

Most information we handle about visitors to our website is governed by this Privacy Policy.

Information we receive in the course of providing healthcare services — what HIPAA calls Protected Health Information, or "PHI" — is governed by HIPAA, our separate Notice of Privacy Practices, and applicable Business Associate Agreements with our healthcare partners. Patients enrolled in our services receive that Notice directly.

The two frameworks overlap but are not identical. When in doubt, the more protective framework controls.

Information We Collect

We collect three general categories of information.

Information you give us directly.When you fill out a form, schedule a consultation, call us, or sign up for services, you may share things like your name, contact information, date of birth, the name of the person you're inquiring about, your relationship to that person, basic information about a health situation, insurance or Medicare details, and your preferred way to be contacted. Patients who enroll in services share substantially more — health history, medications, providers, care needs — and that information is treated as PHI under HIPAA.

Information collected automatically when you visit our site.Like most websites, ours uses cookies, pixels, and similar technologies to record information about your visit. This includes your IP address, approximate location based on that address, device and browser type, the pages and links you interact with, how long you stay, where you came from, and the date and time. We use this information to keep the site running, understand what's working, improve over time, and measure the performance of our advertising.

Information from third parties. We may receive information about you from referring providers, facilities, and partners; from family members or caregivers acting on your behalf with appropriate authorization; from advertising and analytics platforms; and from public sources where allowed by law.

How We Use Your Information

We use the information we collect to:

• Respond to your inquiry and provide the services you've asked about
• Coordinate your care, communicate with your providers, and manage your case
• Verify eligibility for Medicare-covered programs and process billing
• Send appointment reminders, care updates, and other transactional messages
• Send educational content or marketing communications where you've opted in
• Improve our website, services, and operations
• Detect and prevent fraud, abuse, and security issues
• Comply with legal and regulatory obligations
• Defend ourselves in disputes and enforce our agreements
• Measure how our advertising is performing

We do not sell your information.

Advertising, Pixels, and Online Tracking

We advertise on Meta (Facebook and Instagram), Google, and other platforms. To measure whether our ads work and reach people who might be interested in what we do, we use tracking pixels and similar technologies on our website.

Meta Pixel and Conversions API. Our site includes the Meta Pixel, and we use the Meta Conversions API to send aggregated event data to Meta. These tools let us see whether someone who clicked on a SageAlly ad ended up filling out a contact form, count those events for ad reporting, build audiences for future campaigns, and measure return on ad spend.

What Meta receives from us is limited. We do not transmit PHI, specific diagnoses, medication information, or anything else that would identify you as having a particular medical condition. Information shared with Meta is hashed where applicable and processed under Meta's Business Tools Terms. You can control what Meta does with this information through your Facebook or Instagram settings.

Google Analytics and Google Ads.We use Google's analytics and advertising products in a similar way. You can opt out of Google Analytics tracking by installing Google's opt-out browser add-on.

Cookie controls.Most browsers let you block or delete cookies, and you can install browser extensions that limit tracking more broadly. Blocking cookies may break some site functionality. We do not currently respond to "Do Not Track" browser signals because there is no industry standard for how to interpret them.

Opting out of interest-based ads. You can opt out of interest-based advertising from many companies at once at optout.aboutads.info or youronlinechoices.eu.

Texts, Calls, and Emails

If you give us a phone number, you consent to us contacting you about your inquiry, appointments, care, and account. Messages may be sent through automated systems. Standard message and data rates from your carrier may apply.

If you receive marketing texts and want to stop, reply STOP. You'll get one confirmation message and then nothing further. To get help, reply HELP. Opting out of marketing texts does not stop transactional messages tied to active services (for example, appointment reminders for a patient enrolled in our care coordination).

We do not share or sell phone numbers to third parties for their own marketing.

If you give us an email address, you'll receive messages related to your inquiry or services. Marketing emails always include an unsubscribe link.

How We Share Information

We share information only in the situations described below. Outside of these, we don't.

Healthcare partners and providers involved in your care. This includes the supervising physician entity that bills Medicare for certain services, your treating physicians and facilities, referring partners, and other entities involved in coordinating your care. Sharing of PHI with these parties is governed by HIPAA and applicable Business Associate Agreements.

Service providers and vendors.Companies that help us run the business — hosting, electronic health record systems, scheduling, billing, communication platforms, analytics, advertising, and similar functions. They are contractually limited to using your information only for the purposes we've engaged them for.

Advisors. Lawyers, accountants, auditors, insurers, and consultants when needed.

Advertising platforms. Limited, non-PHI data as described in the advertising section above.

Legal and safety. When required by law, subpoena, court order, or government request, or when we believe sharing is needed to protect rights, safety, or property.

Corporate transactions. In connection with a merger, acquisition, financing, sale of assets, or bankruptcy, your information may be transferred to the successor.

With your direction or consent. Any other sharing that you specifically ask for or agree to.

How Long We Keep Information

We keep information only as long as we need it to provide services, meet legal and regulatory requirements, resolve disputes, and enforce our agreements. Medical records and PHI are kept for the periods required by federal and state law, which for many record types is several years past the last date of service.

Once we no longer need information, we either delete it, de-identify it, or move it to archived storage with restricted access. We may retain de-identified or aggregated data indefinitely; once data is properly de-identified, it is no longer personal information.

Your Rights

Depending on the state you live in, you may have one or more of the following rights:

• The right to know what personal information we have about you and how we use it
• The right to a copy of your information
• The right to ask us to correct inaccurate information
• The right to ask us to delete information
• The right to opt out of the sale or sharing of personal information (we do not sell)
• The right to limit certain uses of sensitive information
• The right not to be discriminated against for exercising a right

To make a request, email support@sageally.health with a description of what you're asking for. We will verify your identity before responding. You can also designate an authorized agent to make a request for you.

Some requests are subject to exceptions under applicable law. For example, we generally cannot delete information that we are legally required to retain (such as billing records), and granting some requests may end our ability to keep providing services to you.

PHI is governed by separate HIPAA-based rights described in our Notice of Privacy Practices.

Security

We use a mix of administrative, technical, and physical safeguards to protect the information we hold — including encryption in transit, access controls, training, and vendor due diligence. No system is perfectly secure, and we don't claim ours is. You also play a role: keep your devices and accounts secure, use strong passwords, and let us know right away if you suspect your account has been accessed by someone else.

If we ever experience a security incident affecting your information, we will notify you as required by applicable law.

Children

Our services are designed for adults, generally older adults and their family members. Our website is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information without parental authorization, contact us at support@sageally.health and we will take appropriate steps to address it.

If we provide services to a minor as part of family-based care coordination, we do so only with proper authorization from a parent or legal guardian.

Third-Party Sites

Our website may link to other websites we don't control. We aren't responsible for their privacy practices. If you follow a link off our site, review the destination's privacy policy before sharing information.

Changes to This Policy

We update this Policy from time to time as our business, technology, and the law evolve. When we make a material change, we update the "Last Updated" date and post the new version here. For substantive changes, we may also provide notice through the site or by email. Your continued use of the site or services after a change takes effect means you accept the updated Policy.

Contact

For privacy questions, requests, or complaints: