Privacy policy

Last updated: July 9, 2026

You're trusting us with information about your health and your job — two of the most sensitive things there are. This page explains, in plain English, what we collect, why, and the choices you have.

What we collect

Information you give us. When you check your eligibility or book an evaluation, we collect your name, email address, phone number, state, employer size, how long you've worked there, the reason you're seeking leave, and any notes you choose to add. If you start the eligibility check but don't finish, we keep the email address and answers you've entered so far so we can follow up.

Health information. The reason for your leave and anything you share during a clinical evaluation is sensitive health information. Information you share with a licensed clinician during a telehealth visit is protected health information handled by that clinician under HIPAA. Intake information you submit through this site is handled as described in this policy, with the safeguards below.

Payment information. Payments are processed by Stripe. Your card number never touches our servers — we receive only a payment reference, the amount, and payment status.

Automatically collected information. Like most websites we collect device and usage data (pages visited, browser type, approximate location from IP). If you arrive from a Google ad, we store the ad click identifier (gclid) in a cookie for up to 90 days so we can measure which ads lead to real customers.

How we use it

To provide the service: scheduling your evaluation, connecting you with a clinician licensed in your state, completing certification paperwork, and responding to HR follow-ups you ask us to handle.

To run the business: processing payments, responding to support requests, following up if you started but didn't finish the eligibility check, and measuring advertising so we spend money on ads that actually help people find us.

To improve the site: we use analytics (Google Tag Manager and PostHog) to understand how the site is used. Session replay is configured to mask everything you type — your health details are never captured in recordings.

We do not sell your personal information, and we do not share your health information with your employer. Nothing goes to your employer unless you explicitly ask us to send it.

Who we share it with

Licensed clinicians — the provider who evaluates you needs your intake information to do their job.

Service providers — Stripe (payments), Google (analytics and advertising measurement), PostHog (product analytics), and the infrastructure providers that host this site. Each receives only what it needs to perform its function.

Legal requirements — we may disclose information if required by law, subpoena, or to protect the safety of any person.

We never sell or rent your personal information to data brokers, marketers, or anyone else.

How long we keep it

Intake and evaluation records are retained as long as needed to provide the service and meet clinical record-keeping obligations. Advertising identifiers (gclid) expire after 90 days. You can ask us to delete your information at any time — see “Your choices” below.

How we protect it

All traffic to and from this site is encrypted with TLS. Intake data is stored in an access-controlled database, administrative access requires authentication, and secrets are centrally managed and rotated. Typed input is masked in any session analytics. No system is perfectly secure, but we treat your health information with the care we'd want for our own.

Your choices

You can ask us to show you, correct, or delete the personal information we hold about you by emailing support@leavemd.com. Depending on your state (including California), you may have additional rights to access, delete, or restrict the use of your data — email us and we'll honor them.

You can decline analytics cookies through your browser settings; the eligibility check and checkout work without them.

Children

LeaveMD is a service for working adults and is not directed at anyone under 18. We do not knowingly collect information from minors.

Changes to this policy

If we make material changes, we'll update the date at the top of this page and, for significant changes, note it prominently on the site. Continued use of the service after changes means you accept the updated policy.

Contact

Questions about privacy, or want to exercise any of the rights above? Email support@leavemd.com and a human will respond.