<!-- Markdown mirror of https://maxpowerlabs.ai/privacy.html — generated 2026-07-26 -->
<!-- Canonical HTML: https://maxpowerlabs.ai/privacy.html -->
<!-- MaxPower Labs, LLC · HIPAA-aware workflow systems for medical and behavioral health practices · Ventura, California -->

# Privacy Policy

How we handle information collected through maxpowerlabs.ai. Last updated 25 July 2026.

**MaxPower Labs does not sell or share personal information** and does not run advertising or retargeting trackers. This site uses Google Analytics only. Client data handled during an engagement is governed by the Business Associate Agreement and stays inside the client’s own Microsoft 365 tenant — we do not host protected health information.

---

**This policy covers our website only.** Client data handled during an
engagement is governed by the Business Associate Agreement and the Master Services Agreement, not by this
page. We do not host client protected health information — it stays in the client’s own
Microsoft 365 tenant. See [Trust & Security](https://maxpowerlabs.ai/trust.html).

## What we collect

- **Analytics.** We use Google Analytics 4 (measurement ID G-PH0TJWCXYB) to see which pages
are visited and which buttons are clicked. This includes approximate location, device and browser type,
pages viewed, and referring site. IP addresses are anonymised by Google. We do not use this data to
identify individuals.

- **Information you send us.** If you email, call, or book a call through our scheduling
link, we receive whatever you provide — typically your name, email address, phone number, practice
name and what you want to talk about.

- **Server logs.** Our host, Netlify, records standard web server logs including IP address
and request time for security and reliability purposes.

## What we do not collect

- We do not run advertising trackers, retargeting pixels, or social media tracking scripts.

- We do not sell, rent or share your information with anyone for their own marketing.

- We do not ask for, and ask that you do not send, protected health information through this website,
email, or our scheduling form. If you need to share something sensitive, tell us on the call and we will
set up an appropriate channel.

- We do not currently operate a marketing email sequence. If that changes, every message will carry a
working one-click unsubscribe link.

## Service providers

We use a small number of third parties to run the site. Each processes data on our behalf:

- **Netlify** — website hosting, serverless functions and server logs

- **Google Analytics** — site analytics

- **Google Calendar / Google Workspace** — call scheduling and email

- **Brevo** — transactional email infrastructure

None of these are used to process client protected health information.

## Cookies

The only cookies this site sets are Google Analytics cookies, used to distinguish one visit from another.
You can block them in your browser settings or with any standard content blocker, and the site will work
normally without them.

## How long we keep things

Analytics data is retained on Google’s default schedule. Correspondence is retained for as long as
we have an active or prospective relationship, and then for as long as our record-keeping obligations
require. You can ask us to delete your correspondence at any time.

## Your California privacy rights

If you are a California resident, the CCPA and CPRA give you the right to know what personal information
we hold about you, to request its deletion, to request correction, and not to be discriminated against for
exercising those rights. **We do not sell or share personal information** as those terms are
defined under California law, so there is nothing to opt out of — but you are welcome to confirm that
with us.

To exercise any of these rights, email [paul@maxpowerlabs.ai](mailto:paul@maxpowerlabs.ai). We
will respond within 45 days. We may need to verify your identity before acting on a request.

## Security

The site is served over HTTPS with HSTS. Our serverless endpoints are restricted to same-origin requests
and rate-limited. Our full security posture for client engagements is described on the
[Trust & Security](https://maxpowerlabs.ai/trust.html) page.

## Children

This website is directed at practice owners and administrators. We do not knowingly collect information
from anyone under 18 through this site.

## Changes

If we change this policy we will update the date at the top of the page. Material changes will be
described in a note here for at least 90 days.

## Contact

MaxPower Labs, LLC

2646 Palma Dr. Suite 155, Ventura, CA 93003

[paul@maxpowerlabs.ai](mailto:paul@maxpowerlabs.ai)  · 
[(800) 506-8107](tel:+18005068107)

---
