Legal

Privacy Policy

Effective date: July 13, 2026 · Perfectorie Inc. / CareLoop

CareLoop is a product of Perfectorie Inc., a Delaware corporation operating in California. This policy explains how we collect, use, and protect your information when you use CareLoop.

1. Who We Are

Perfectorie Inc. ("we", "us", "our") operates CareLoop, a client follow-up and communication platform for medspa and wellness businesses. Our registered address is in Delaware; our principal operations are in California.

For privacy questions, contact us at sandhya@get-careloop.com.

2. Information We Collect

From medspa operators (our customers):

Name, business name, email address, and password when you create an account
Business details entered during onboarding (business type, services, providers)
Payment information processed through Stripe (we do not store card numbers)

From your clients (end users whose data you manage in CareLoop):

Name, email address, and phone number
Treatment history and appointment records
Health intake form responses (if your practice uses our intake feature)
SMS and email communication preferences and consent status

Automatically collected:

Browser type, IP address (hashed for HIPAA compliance), and usage data via Google Analytics and Microsoft Clarity
Log data and session information for security and debugging

3. How We Use Your Information

To provide, operate, and improve CareLoop
To send follow-up messages and campaigns to your clients on your behalf
To process payments via Stripe
To send transactional emails (account verification, receipts, support) via Resend
To send SMS messages via Twilio on your instruction
To analyze usage patterns and improve the product (Google Analytics, Microsoft Clarity)
To comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We share data only with the following service providers, each bound by data processing agreements:

Stripe — payment processing
Resend — transactional email delivery
Twilio — SMS delivery
Google Analytics — usage analytics
Microsoft Clarity — session recording and heatmaps
Mistral AI — AI-assisted email drafting (no data is used to train models)

We may disclose information if required by law, court order, or to protect the rights and safety of our users.

5. Health Information (HIPAA)

CareLoop is designed for use by healthcare-adjacent businesses. If your use of CareLoop involves protected health information (PHI) as defined under HIPAA, you are responsible for ensuring you have appropriate patient authorizations. We implement technical safeguards including encryption at rest, hashed IP addresses in audit logs, and access controls.

If your business requires a Business Associate Agreement (BAA), please contact us at sandhya@get-careloop.com.

6. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

Right to Know — you may request details about the personal information we have collected about you in the past 12 months
Right to Delete — you may request deletion of your personal information, subject to certain exceptions
Right to Opt-Out — we do not sell personal information, so there is nothing to opt out of
Right to Non-Discrimination — we will not discriminate against you for exercising any of these rights

To exercise your rights, email us at sandhya@get-careloop.com with the subject line "California Privacy Request". We will respond within 45 days.

7. Data Retention

We retain your account data for as long as your account is active. If you close your account, we delete or anonymize your data within 90 days, unless we are required to retain it for legal or compliance reasons.

Client data you have imported or created in CareLoop is retained for the same period. You may export or delete client records at any time from within the platform.

8. Security

We use industry-standard security practices including encryption in transit (TLS), encryption at rest, hashed audit logs, and role-based access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Cookies and Tracking

We use cookies and similar tracking technologies for authentication, analytics, and session recording. Specifically:

Google Analytics — measures traffic and usage patterns
Microsoft Clarity — records anonymized session replays and heatmaps to help us improve the product

You can disable cookies in your browser settings, though some features of CareLoop may not function correctly without them.

10. Children's Privacy

CareLoop is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page and notify active users by email for material changes.

12. Contact Us

For any privacy-related questions, requests, or concerns:

Email: sandhya@get-careloop.com
Via our contact form