Privacy Policy.

What this policy covers.

This Privacy Policy explains how Statelayer Inc. ("Statelayer," "we," "us") handles information collected through our website at statelayer.co (the "Site") — for example, when you fill out our contact form or email us.

It does not cover the Statelayer product or any protected health information (PHI) that a clinic's use of our software may involve. We handle clinic and patient data inside the product only under a separate Business Associate Agreement (BAA) and service agreement with each clinic, in line with HIPAA. See our Security & HIPAA page for how that data is protected.

Information we collect.

Information you give us

When you submit our contact form or email us, we collect what you choose to share — typically your name, clinic name, email address, and the contents of your message. You don't need an account, and we don't ask for payment information on the Site.

Information collected automatically

When you visit the Site, our analytics provider collects limited technical data such as your IP address, browser and device type, referring page, and the pages you view, so we can understand traffic and improve the Site. We use a privacy-first, cookieless approach that doesn't track you across other websites.

How we use information.

• ✓Respond to your inquiry and follow up about Statelayer.
• ✓Provide information or materials you request.
• ✓Operate, maintain, secure, and improve the Site.
• ✓Comply with our legal obligations and protect our rights.

We do not use the information you submit for advertising, and we never sell it.

Who we share it with.

We do not sell your personal information, and we don't share it for advertising. We rely on a small number of service providers that process information only to provide their services to us:

• ✓Web3Forms — delivers our contact-form submissions to us.
• ✓Cloudflare — hosts the Site and provides privacy-focused, cookieless analytics.

We may also disclose information if required by law, or to protect the rights, safety, and security of Statelayer, our users, or the public.

Cookies, retention, and Do Not Track.

Cookies & Do Not Track

Our Site doesn't use advertising or cross-site tracking cookies. We use Cloudflare Web Analytics, which is privacy-first and cookieless: it sets no cookies, doesn't fingerprint you, and doesn't track you across other websites. We don't sell your data or build advertising profiles, so we treat your visit privately whether or not your browser sends a "Do Not Track" (DNT) signal.

How long we keep it

We keep contact-form submissions and related correspondence for as long as needed to respond to you and to maintain our business records, then delete them when they're no longer needed.

Your choices, children, and changes.

Your choices and rights

You can ask us to access, correct, or delete the personal information you've given us, or to stop contacting you, by emailing . Depending on where you live, you may have additional rights under laws such as the CCPA or GDPR — contact us and we'll honor applicable requests.

Children's privacy

The Site is intended for clinics and businesses, not children. We do not knowingly collect personal information from anyone under 16.

Changes to this policy

We may update this policy from time to time. When we do, we'll publish the revised policy on this page and update the "Effective" date shown above; any significant changes will be noted here. We encourage you to review this page periodically.