Privacy Notice

LAST UPDATED: MARCH 10, 2023

This Privacy Notice applies to your access and use of all products and services that are made available by Zaya Health Inc., through our websites and mobile applications that link to this Privacy Policy (the “Services”). This Privacy Notice explains how we collect, use, disclose, and otherwise process personal information in connection with our Services. This Privacy Notice is not a contract and does not create any legal rights or obligations.

Who We Are: Zaya Health Inc. (“Zaya”, “we”, or “us”) focuses on making mental healthcare more accessible by processing payments for your therapy sessions and helping you submit out-of-network insurance claims for reimbursement. This Privacy Notice explains how we collect, use, disclose, and otherwise process personal information in connection with our Services.

Region-Specific Disclosures

We may choose or be required by law to provide different or additional disclosures relating to the processing of personal information about residents of certain countries, regions, or states. Please refer below for disclosures that may be applicable to you:

If you are a resident of the State of Nevada in the United States, please click here for additional Nevada-specific privacy disclosures.

What is Personal Information?

When we use the term “personal information” in this Privacy Notice, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to you. It does not include aggregated or deidentified information that is maintained in a form that is not reasonably capable of being associated with or linked to you.

Our Collection of Personal Information

From the first moment you interact with us, we are collecting personal information about you. Sometimes we collect personal information automatically when you interact with our Services and sometimes, we collect the personal information directly from you. At times, we may collect personal information about you from other sources and third parties, even before our first direct interaction.

Personal Information You Provide

We collect the following personal information you provide in connection with our Services:

Registration Information, including first and last name, email, date of birth, address, and gender.
Insurance Information, including insurance company and insurance member ID.
Therapy Session Information, including provider, session date and time, session length, fee, and modality.
Personal Health Information, including diagnosis and CPT code.
Provider Information, including first and last name, license type, license number, phone number, EIN (or SSN), and address.
Billing Information, including fees and bank account deposit information.

Personal Information Automatically Collected

As is true of most digital platforms, we collect certain personal information automatically when you visit our Services, including:

Log File Data, including your internet protocol (IP) address, operating system, browser type, browser id, date/time of visit, and pages visited.
Analytics Data, including the electronic path you take to our Services, through our Services and when exiting our Services, as well as your usage and activity on our Services, such as the links and object you view, click or otherwise interact with (also known as “Clickstream Data”).
Location Data, including your general geographic location based on your IP address or more precise location when accessing our Services through a mobile device.

For information about our and our third-party partners’ use of cookies and related technologies to collect information automatically, and any choices you may have in relation to its collection, please visit our Cookie Notice.

Personal Information from Other Sources and Third Parties

We also obtain personal information from other sources, which we often combine with personal information we collect either automatically or directly from you. We receive the same categories of personal information as described above from the following sources and third parties:

Publicly Available Sources: We may collect personal information about you that we do not otherwise have, such as a provider’s National Provider Identifier (NPI), from publicly available sources. We may combine this information with the information we collect from you directly. We use this information to support our Service functionality.
Service Providers: Our service providers that perform services solely on our behalf, such as analytics and certain marketing providers, collect personal information and often share some or all of this information with us. For example, we receive personal information you submit in response to requests for feedback to our feedback providers.

Our Use of Personal Information

We use personal information we collect to:

Communicate with you.
Address inquiries or complaints made by or about an individual in connection with our Services.
Market our Services to you.
Administer, improve, and personalize our Services, including by recognizing you and remembering your information when you return to our platforms.
Develop, operate, improve, maintain, protect, and provide the features and functionality of our Services.
Create and maintain user accounts.
Test, enhance, update, and monitor the Services, or diagnose or fix technology problems.
Help maintain and enhance the safety, security and integrity of our property, platform, Services, technology assets and business.
Defend, protect, or enforce our rights or applicable contracts and agreements.
Prevent, investigate, or provide notice of fraud or unlawful or criminal activity.
Comply with legal obligations.

If you choose to contact us, we may need additional information to fulfill your request or respond to your inquiry. We may provide additional privacy disclosures where the scope of the inquiry/request and/or personal information we require fall outside the scope of this Privacy Notice. In that case, the additional privacy disclosures will govern how we may process the information you provide at that time.

Our Disclosure of Personal Information

We disclose personal information in the following ways:

To Service Providers: We engage other third parties to perform certain functions on our behalf in connection with the uses of personal information described in the Our Use of Personal Information section above. Depending on the function the third party serves, the service provider may process personal information on our behalf or have access to personal information while performing functions on our behalf.
To Other Businesses as Needed to Provide Services: We may share personal information with third parties that you engage with through our Services or as needed to fulfill a request or transaction including, for example, payment processing services, financing providers.
Advertisers and Publishers: We engage in advertising both on our Services and through third-party services. Advertisers and publishers may share personal information with us in connection with our advertising efforts. For example, we may obtain information about whether an advertisement on our Services led to a successful engagement between you and a third-party advertiser.
Business Transaction or Reorganization: We may take part in or be involved with a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose personal information to a third-party during negotiation of, in connection with or as an asset in such a corporate business transaction. Personal information may also be disclosed in the event of insolvency, bankruptcy, or receivership.
Legal Obligations and Rights: We may disclose personal information to third parties, such as legal advisors and law enforcement:
- in connection with the establishment, exercise, or defense of legal claims;
- to comply with laws or to respond to lawful requests and legal process;
- to protect the rights and property of us, our agents, customers, and others, including to enforce our agreements, policies, and terms of use;
- to detect, suppress, or prevent fraud;
- to reduce credit risk and collect debts owed to us;
- to protect the health and safety of us, our customers, or any person; or
- as otherwise required by applicable law.
Consent: We may disclose personal information about you to certain other third parties with your consent.

Children's Personal Information

Our Services are not directed to, and we do not intend to, or knowingly, collect or solicit personal information from children under the age of 13. If you are under the age of 13, please do not use our Services or otherwise provide us with any personal information either directly or by other means. If a child under the age of 13 has provided personal information to us, we encourage the child’s parent or guardian to contact us to request that we remove the personal information from our systems. If we learn that any personal information, we collect has been provided by a child under the age of 13, we will promptly delete that personal information. We do, however, process personal information about children, including registration and therapy session information when it is necessary for the Services we are offering, and you provide it to us. This information is used to provide our Services.

Third-Party Websites

Our Services may include links to third-party websites, plug-ins, and applications. Except where we post, link to or expressly adopt or refer to this Privacy Notice, this Privacy Notice does not apply to, and we are not responsible for, any personal information practices of third-party websites and online services or the practices of other third parties. To learn about the personal information practices of third parties, please visit their respective privacy notices.

Updates to This Privacy Notice

We will update this Privacy Notice from time to time. When we make changes to this Privacy Notice, we will change the "Last Updated" date at the beginning of this Privacy Notice. If we make material changes to this Privacy Notice, we will notify you by email to your registered email address, by prominent posting on our Services, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.

Contact Us

If you have any questions or requests in connection with this Privacy Notice or other privacy-related matters, please send an email to privacy@mentaya.com

Mentaya