Privacy Policy

Introduction & Scope

Welcome to CEREVITY Health, Inc. ("CEREVITY," "we," "our," or "us"). We operate a nationwide network of independent licensed clinicians who provide private-pay mental health services through secure telehealth.

This Privacy Policy applies to information collected through our website at https://cerevity.com, our intake and scheduling systems, and our service-related communications. Protected Health Information (PHI) created or received in the course of treatment is governed by our separate HIPAA Notice of Privacy Practices, which controls in the event of any conflict with this Privacy Policy.

By using our website or services, you agree to the practices described here.

Information We Collect

Information You Provide Directly

We collect information you give us when you create an account, schedule a consultation, communicate with us, complete intake forms, or attend therapy sessions. This may include:

• Identifiers: full name, email address, phone number, mailing address, date of birth
• Account credentials: username and password for the client portal
• Payment information: credit card details (processed by PCI-compliant payment processors; CEREVITY does not store full card numbers)
• Health-related information: intake responses, presenting concerns, treatment goals, session content, and clinical notes (governed by HIPAA)
• Communications: messages you send through our portal, contact forms, email, or SMS

Information Collected Automatically

When you visit our website, certain information is collected automatically through cookies, server logs, and analytics tools:

• Browser type, operating system, and device identifiers
• IP address and approximate geographic location
• Pages viewed, time spent on pages, and referring URLs
• Date and time of access

Information from Third Parties

We may receive limited information from clinicians within our network, payment processors, and analytics providers in the course of administering services and improving the platform.

How We Use Your Information

We use the information we collect for the following purposes:

Sharing & Disclosure

We do not sell your personal information. We share information only as described below:

• With your clinician: within our network, to deliver care
• With service providers: vendors performing functions on our behalf (e.g., telehealth platform, electronic health record, secure messaging, payment processing) under written agreements that restrict use and require appropriate safeguards, including Business Associate Agreements where applicable
• With your consent: any other disclosure you authorize in writing
• For legal reasons: to comply with subpoenas, court orders, mandatory reporting laws, or to protect the rights, safety, or property of CEREVITY, our clients, or others, as permitted or required by law
• In a business transaction: in connection with a merger, acquisition, financing, or sale of assets, subject to confidentiality protections

How We Protect Your Information

We implement administrative, technical, and physical safeguards designed to protect your information, including:

• Encryption of data in transit (TLS) and at rest where applicable
• Role-based access controls limiting staff access to information they need to perform their duties
• HIPAA-compliant electronic health record and telehealth systems
• Workforce training on privacy and security obligations
• Ongoing monitoring, vulnerability management, and incident response procedures

No method of electronic transmission or storage is 100% secure. While we apply commercially reasonable safeguards, we cannot guarantee absolute security and encourage you to take precautions when transmitting sensitive information online.

Your Privacy Rights

Depending on your state of residence, you may have the following rights with respect to your personal information. CEREVITY honors the rights below for all U.S. residents regardless of state, except where applicable law requires a different scope:

To exercise any of these rights, contact us using the information in Section 11. We will respond within 30 days of receiving a verifiable request, and may request information necessary to verify your identity. Where rights conflict with HIPAA's individual rights, the HIPAA Notice of Privacy Practices controls for protected health information.

Cookies & Tracking Technologies

Our website uses cookies and similar technologies to operate the site, remember your preferences, analyze traffic, and improve user experience. You can control cookies through your browser settings. We honor recognized opt-out signals such as Global Privacy Control (GPC) where required by law.

Children's Privacy

Our services are not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate steps.

Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices or content of those sites and encourage you to review their privacy policies before sharing information.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page and, where appropriate, provide additional notice. Material changes affecting how we use your information will be communicated through the website or by email where contact information is on file.

Contact Us

Questions, concerns, or requests regarding this Privacy Policy or your information can be directed to: