Privacy notice.

Terra Wellness is operated by Dr. Astor’s wellness practice (referred to in this notice as “the practice”, “we”, or “us”). This notice covers the public website at terrawellness.com, the authenticated client dashboard, and the mobile application. Telephone consultations and in-room visits are governed by the practice’s standard intake form, which you sign at first appointment.

Our privacy posture is restraint. We collect only what we need to identify you, charge the right card, deliver the content you have paid for, and reply to your messages. Where a feature could work without an extra data point, we omit the data point.

When you create an account we collect your name, email address, and a hashed password. If you opt to enrol in a paid tier we additionally collect your billing address and a payment-method token returned by Stripe; we never see or store the underlying card number.

As you use the dashboard we record the lessons you have started or completed, your daily habit check-ins, the points you have earned and redeemed, and the consultations you have booked. Server logs capture the standard set of request metadata (timestamp, IP, user-agent) and are kept for ninety days for security review.

What we do not collect

• No tracking pixels from advertising networks. The site uses one privacy-respecting analytics tool to count page views in aggregate.
• No third-party social-login providers. Account creation is email and password only.
• No location data beyond the country implied by your billing address. We do not use device GPS.

The information we collect is used to operate your account, deliver the content and habit programs that correspond to your tier, process payments, and respond to messages you send us. Aggregated, de-identified usage data informs improvements to lessons and product flows.

We send transactional email about your account: receipts, password resets, security notices, and confirmations of booked consultations. You cannot unsubscribe from transactional email while your account is active. If we ever introduce a marketing newsletter, it will be opt-in and clearly separable from the transactional stream.

We do not sell, rent, or barter information to third parties. We share data only with the small set of vendors needed to run the service, each under a written data processing agreement.

• Stripe— processes payments and stores billing tokens. Stripe is PCI-DSS Level 1 certified.
• Amazon Web Services— hosts the application and database in US-East data centers.
• Postmark— delivers transactional email.
• Go High Level— runs the consultation calendar Dr. Astor uses for in-person and video appointments.

We will disclose information when required by a valid legal process. In that event we will, where lawful, notify you and give you the opportunity to challenge the request.

Account information is retained while your account is active and for thirty days after you close it, after which we permanently delete or anonymise it. Billing records are retained for seven years to satisfy United States tax law. Server logs roll off after ninety days.

You can request deletion at any time from your profile page or by writing to the address in section eight. A deletion request takes effect within fourteen days excluding records we are obliged by law to retain.

Depending on where you live, you have the right to ask us what data we hold about you, to correct it, to delete it, to receive a portable copy, and to opt out of any processing that goes beyond what is needed to run the service.

Residents of California have additional rights under the California Consumer Privacy Act, including the right to know the categories of data sold or shared. We do not sell or share data, so the disclosure is short. To exercise any of these rights, contact us using the details below.

Data in transit is encrypted with TLS 1.3. Data at rest is encrypted with AES-256. Passwords are hashed with bcrypt and never stored in plain text. Access to production data is restricted to a small number of practice staff and audited monthly.

No system is perfect. If we discover a breach affecting your account, we will notify you by email within seventy-two hours of confirming the scope, along with the steps we have taken and the steps we recommend you take.

Privacy questions, deletion requests, and complaints can be sent to our contact form or written to the postal address on file with the practice. A reply usually arrives within two business days.

We will update this notice as the service evolves. The effective date at the top of the page reflects the most recent change. Material changes will be highlighted in a banner on the dashboard for thirty days.