Privacy Policy

Effective Date: January 1, 2025
Last Updated: August 23, 2026

GoodABA and Find ABA Therapy ("we," "us," or "our") operate goodaba.com and findabatherapy.org. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit either site or use our services.

1. Information We Collect

1.1 Information You Provide Directly

Account Information: When you create an account as a therapy provider, we collect your name, email address, phone number, and business information (practice name, address, services offered).
Contact Form Submissions: When families submit inquiries through provider contact forms, we collect the information provided (name, email, phone number, message content, and any details about care needs).
Payment Information: When you subscribe to a paid plan, payment is processed by Stripe, Inc. We do not store your full credit card number. We receive only the last four digits, card type, and billing address for record-keeping purposes.

1.2 Information Collected Automatically

Usage Data: We collect information about how you interact with the Site, including pages visited, search queries, clicks on listings, and time spent on pages.
Device Information: We collect browser type, operating system, device type, and screen resolution.
IP Address: We collect IP addresses for security purposes, fraud prevention, and to provide location-relevant search results.
Cookies and Similar Technologies: We use essential cookies to maintain session state and remember your preferences. On GoodABA provider-marketing pages, optional Meta measurement remains off until you allow it. It is not enabled on Find ABA Therapy, agency dashboards, family portals, intake forms, client records, signatures, or other care-related product surfaces.

1.3 Information from Third Parties

Google Maps/Places API: When you use address autocomplete features, Google may collect usage data subject to Google's Privacy Policy.
Stripe: Our payment processor provides us with transaction confirmations and subscription status.
Advertising Platforms: If you allow optional measurement, Meta may receive the limited provider-marketing events described in Section 5.5.

2. How We Use Your Information

We use the information we collect to:

Operate, maintain, and improve the Site and our services
Process transactions and send related information (confirmations, invoices, renewal notices)
Connect families with ABA therapy providers through our directory and contact forms
Send administrative communications (service updates, security alerts, support messages)
Respond to your comments, questions, and customer service requests
Monitor and analyze usage patterns and trends to improve user experience
Measure which provider-marketing campaigns lead to agency workspaces and billing setup
Detect, prevent, and address fraud, spam, and security issues
Comply with legal obligations and enforce our Terms of Service

3. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

3.1 With Therapy Providers

When you submit a contact form inquiry, your provided information (name, contact details, message) is shared with the therapy provider you are contacting. Providers may use this information to respond to your inquiry.

3.2 With Service Providers

We share information with third-party vendors who perform services on our behalf:

Stripe: Payment processing
Convex: Application database and backend services
Clerk: Account authentication
Vercel: Website hosting
PostHog: Product and acquisition analytics
Meta: Optional provider-advertising measurement
Resend: Transactional email delivery
Cloudflare: Security and spam protection (Turnstile)
Google: Maps and address autocomplete services

3.3 For Legal Reasons

We may disclose information if required by law, court order, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

3.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your personal information.

4. Data Retention

Account Data: We retain your account information for as long as your account is active. You may request deletion at any time.
Contact Form Inquiries: Inquiry data is retained for up to 2 years to allow providers to reference past communications, unless earlier deletion is requested.
Payment Records: Transaction records are retained for 7 years as required for tax and accounting purposes.
Usage Analytics: Anonymized analytics data may be retained indefinitely for aggregate statistical analysis.

5. Your Rights and Choices

5.1 Access and Correction

You may access and update your account information at any time by logging into your dashboard.

5.2 Deletion

You may request deletion of your account and personal data by contacting us at support@findabatherapy.org. We will process your request within 30 days, subject to any legal retention requirements.

5.3 Opt-Out of Communications

You may opt out of promotional emails by clicking the "unsubscribe" link in any email. You cannot opt out of transactional emails related to your account or subscriptions.

Essential cookies support account and security functions. Optional Meta measurement is off until you allow it. You may change that choice at any time. Declining or withdrawing consent removes stored provider-campaign attribution and Meta browser identifiers from this browser and prevents future eligible events from being sent.

5.5 Meta Provider-Advertising Measurement

With your permission, GoodABA uses the Meta Pixel and Conversions API together to measure provider advertising. Eligible events are limited to allowlisted GoodABA marketing page views, pricing views, completed provider-workspace registration, and card attachment. Browser and server copies of page events share one identifier for deduplication; server-verified outcomes use stable retry-safe identifiers.

GoodABA sends the event name and time, an allowlisted marketing-page URL without the raw Meta click identifier, and a hashed consent-created random reporting ID. It does not add an agency owner's email, workspace ID, IP address, browser user agent, or Meta browser-cookie identifier. Neither browser nor server measurement includes family or client identities, directory searches, intake answers, diagnoses, clinical information, documents, or protected health information.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

Encryption of data in transit (HTTPS/TLS)
Encryption of sensitive data at rest
Regular security assessments
Access controls limiting employee access to personal data
Secure authentication practices

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Children's Privacy

Our Site is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at support@findabatherapy.org.

8. Health Information Disclaimer

Find ABA Therapy is a directory service connecting families with therapy providers. We are not a healthcare provider and do not provide medical advice, diagnosis, or treatment. Information shared through contact forms is for scheduling and inquiry purposes only.

While our contact forms may collect general information about care needs, we are not a HIPAA-covered entity. Providers listed on our platform are responsible for their own HIPAA compliance when handling protected health information outside of our platform.

9. Third-Party Links

The Site may contain links to third-party websites, including provider websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any site you visit.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last Updated" date. Your continued use of the Site after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: support@findabatherapy.org
Website: findabatherapy.org/contact

This Privacy Policy is effective as of January 1, 2025 and applies to all users of findabatherapy.org.