Last updated September 11, 2026
Scope of this policy
RefractAI, Inc. ("Refract," "we," "us," or "our") operates the public Refract informational and marketing website. This Privacy Policy describes information associated with visits to that website and business inquiries submitted through its contact form or general inquiry email. It does not govern the Refract application, clinician or patient portals, or patient records processed through contracted services. Those activities are covered by their applicable agreements and notices.
Information you provide
When you submit the contact form, we receive your first and last name, email address, message, and any practice name you choose to provide. If you email us directly, we receive your email address, message, and any other information you include. We use this information to respond to your inquiry and discuss the products or services you asked about.
Please do not send patient information, medical records, passwords, or other sensitive information through the public contact form or general inquiry email. These channels are for business inquiries and are not intended for clinical care or emergencies.
Website and security information
When your browser requests website pages or external resources, the services receiving those requests receive connection information such as your IP address and browser request information. Website delivery and security services may also process request times, requested pages, and technical information used to deliver content or investigate errors and misuse.
The contact page includes Cloudflare Turnstile to help distinguish legitimate visitors from automated traffic. Cloudflare processes signals such as IP address, browser information, and connection characteristics to provide and improve its bot-detection service. Font files are served from our website rather than requested from Google by your browser.
How information is used and shared
We use website and inquiry information to deliver the website, respond to business inquiries, maintain communications about those inquiries, and address technical problems or misuse.
The contact form is processed by a Cloudflare-hosted function and sends inquiry content through Amazon Simple Email Service to hello@myrefract.com. Our website delivery, security, and email providers process information needed for those functions. Cloudflare processes the security signals described above. Information you send by email is also processed by the email services involved in delivering and storing the message.
We may disclose information when required by applicable law or valid legal process, or when reasonably necessary to investigate fraud or misuse, protect rights and safety, or establish or defend legal claims.
Analytics and browser privacy signals
The website is configured to block Cloudflare’s optional browser analytics beacon and does not include advertising pixels or session-replay tools. Cloudflare still processes connection and request information to host and secure the website. Blocking optional browser analytics does not prevent hosting and security processing.
The website does not change its essential delivery or security functions in response to Do Not Track or Global Privacy Control signals. Its optional analytics restriction applies regardless of those signals. Cloudflare also uses Turnstile security signals to improve its bot-detection service, as explained in its linked privacy addendum. This is separate from optional website analytics.
Browser controls and external services
Your browser may let you manage stored site data and restrict external resources. Blocking resources can affect the appearance or operation of the website, including the contact form. You can email hello@myrefract.com instead of using the form.
External websites linked from this website have their own privacy practices. Cloudflare’s Turnstile Privacy Addendum provides further information about its processing.
Retention and security
Business inquiries may remain in our business email records after we respond. Retention depends on ongoing correspondence, business recordkeeping needs, and applicable legal obligations. Technical records held by our hosting, security, and email providers are also subject to those providers’ retention practices and applicable service settings. You can request deletion of information associated with your inquiry by contacting us as described below; applicable legal obligations or exceptions may limit what can be deleted.
The public website uses HTTPS to protect information in transit between your browser and the website. No method of electronic transmission or storage is completely secure. Please limit the information you send to what is needed for your business inquiry.
Your requests and choices
You can contact hello@myrefract.com to ask about personal information you have provided through this website, request access, correction or deletion, or ask us to stop further business follow-up. Depending on applicable law, some requests may be subject to verification, exceptions, or additional requirements. We will respond as required by applicable law. Please describe your request without including medical records or other sensitive information.
Audience and updates
This website is intended for healthcare organizations and other business users. If you believe a child has submitted personal information through the website, please contact us.
We may update this policy by posting a revised version and changing the date above. We will provide any additional notice or obtain consent required by applicable law.
Contact
For privacy questions or requests relating to this public website, contact RefractAI, Inc. at hello@myrefract.com.