Privacy Policy
Effective Date: September 16, 2026
Centruva LLC, acting on its own behalf and as a Management Services Organization for its affiliated professional medical practices (collectively, “Centruva,” “we,” “us,” or “our”), respects your privacy and is committed to protecting the personal data we collect through our public marketing website at centruva.com and through pre-account pages of the Centruva platform at app.centruva.com, before you create an account or answer any medical question (together, the “Services”). This Privacy Policy explains how we collect, use, and protect your information.
This policy does not cover your medical information. Once you create an account or begin answering medical questions, the information you provide is collected for Centruva Medical PLLC, the affiliated medical practice that provides your care, and is governed by that practice’s Notice of Privacy Practices rather than by this policy.
1. Information We Collect
We collect limited information to manage our waitlist and provide updates about our launch:
- Waitlist Information: If you sign up, we collect your email address. You may optionally provide your first name and state of residence.
- Technical Data: We automatically collect your IP address and browser User Agent for security and abuse prevention.
- Marketing Attribution: We collect UTM parameters (such as source, medium, and campaign) via the URL to understand how you found our Services.
- Platform Contact Information: If you give us your email address on the Centruva platform before creating an account, we collect only that email address and a record of which version of the consent language you agreed to. We do not collect or store the protocol you were looking at, the category you selected, or any answer to any medical question, and we do not record your IP address or browser information at that step.
2. How We Use Your Information
We use the information collected under this policy to:
- Send you updates about Centruva — new protocols, availability in your state, and occasional promotional offers.
- Follow up with people who started but did not finish signing up.
- Confirm your email address where we use a confirmation step, and record and honor your unsubscribe preference.
- Prevent bot abuse and spam on our marketing website.
- Understand which marketing channels people arrive through.
We do not use this information to make any medical or eligibility decision, and we do not use it to build advertising audiences or profiles.
3. Data Storage and Third Parties
We do not sell your personal data. We do not use information submitted to the waitlist to build advertising audiences or profiles. Advertising measurement is described below.
Your data is processed and stored using the following service providers:
- Amazon Web Services (AWS): For hosting, database storage (DynamoDB for waitlist records; Aurora for platform contact records), and sending emails (SES).
- Cloudflare: For bot protection and security on our marketing website (Turnstile).
Ad Measurement
We use OpenAI’s advertising pixel on our public homepage to measure visits and clicks on designated Get Started buttons. Measurement starts automatically unless blocked by a browser privacy signal or a saved opt-out. A button click does not tell us whether you completed an assessment or received care.
OpenAI receives an ad click reference, when available, event information, our website origin, event timing, and technical information associated with your browser connection. The pixel can store a first-party cookie called __oppref to connect events with an ad click. This integration is configured to request that events be excluded from future user-level personalization. OpenAI’s processing is governed by its Conversion Terms and applicable Ad Tools Data Processing Addendum.
OpenAI’s automatic advanced matching may detect supported contact information entered into website forms, such as email addresses or names. The pixel normalizes and hashes that information in your browser before including it with conversion events to help match them to ads. Raw contact information is not sent through automatic advanced matching. Hashing does not make identifiers anonymous.
This measurement runs only on our public marketing website at centruva.com. No advertising pixel, tag or matching script of any kind runs on the Centruva platform at app.centruva.com — not on the pre-account pages, not in the screening questions, and not in the patient portal. Nothing you type into the Centruva platform, including your email address, is sent to any advertising network. We also do not add assessment answers, treatment details, medical information or purchase details to marketing events anywhere.
You can prevent this measurement by enabling Global Privacy Control in a supporting browser. We also honor unexpired opt-outs previously saved through this site’s measurement controls, which used a 180-day expiration. Blocking future measurement does not retract events already sent. To exercise your privacy rights, including requesting access to or deletion of your information, contact requests@centruva.com.
4. Your State Data Privacy Rights
Depending on your state of residence, you may have specific rights regarding your personal data under laws such as the Texas Data Privacy and Security Act (TDPSA), the Colorado Privacy Act (CPA), the Florida Digital Bill of Rights (FDBR), or the Oregon Consumer Privacy Act (OCPA), and other rights that may apply where you live. These rights may include:
- Right to Confirm and Access: You may confirm whether we are processing your personal data and request access to it.
- Right to Correct: You may request that we correct inaccuracies in your personal data.
- Right to Delete: You may request that we delete personal data provided by or obtained about you.
- Right to Portability: You may request a copy of your personal data in a portable and readily usable format.
- Right to Opt-Out: You have the right to opt out of covered sales, targeted advertising, or profiling where applicable. We honor Global Privacy Control for homepage ad measurement as described above. You can also contact us to exercise your applicable opt-out rights.
To exercise any of these rights, please contact us at requests@centruva.com.
5. Children’s Privacy
Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we learn we have collected information from a child under 18, we will delete it immediately.
6. Data Retention
We keep the contact information described in this policy for as long as we are sending you updates, until you ask us to delete it.
If you unsubscribe, we keep your email address on an internal suppression list so that we can continue to honor your choice and not email you again. We do not delete that suppression record when you unsubscribe, because deleting it is what would allow us to contact you again by mistake.
Contact information collected under this policy is ordinary business contact data held by Centruva LLC. It is not part of your medical record, it is not held under medical record retention rules, and it is not added to the medical records held by Centruva Medical PLLC.
7. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
Email: requests@centruva.com Address: 2213 Virginia Dare Pl. Raleigh, NC 27610