Privacy Policy

Effective Date: January 1, 2025  ·  Last Updated: 2025  ·  Cold Ischemia Foundation

1. Who This Policy Applies To

This Privacy Policy applies to all visitors, users, and members of the Cold Ischemia Foundation website at coldischemia.com and any subdomains or associated tools. By using the Site, you agree to the collection and use of information as described in this policy.

2. Information We Collect

We collect the following categories of information:

• Account information — your name, email address, and password when you create a member account through Memberstack
• Payment information — billing details including name, card type, and last four digits processed and stored securely by Stripe. Cold Ischemia Foundation does not store full payment card numbers on our servers at any time
• Tool inputs — information you voluntarily enter into our care partner tools (Relationship Cartography Engine, Narrative Mirror, Two Futures Engine, SIGNAL, and MERIDIAN). This data is sent to Anthropic's API to generate your outputs and is not stored by Cold Ischemia Foundation after your session ends
• Usage data — standard web analytics including pages visited, time on site, browser type, and general geographic region. This is collected in aggregate and is not tied to your identity
• Communications — any messages you send us directly by email

3. Information We Do Not Collect

We do not collect your Social Security number, government ID, or sensitive financial documents. We do not collect health records or clinical information. We do not require you to disclose your medical diagnosis, your patient's diagnosis, or any protected health information to use our Site. Any health-related information you voluntarily share within our tools is used solely to generate your personalized output and is not retained.

4. How We Use Your Information

We use the information we collect to:

• Create and manage your member account
• Process your membership payments through Stripe
• Deliver access to paid tools and gated content through Memberstack
• Generate personalized AI outputs from your tool inputs through Anthropic's API
• Respond to your questions and support requests
• Improve the Site and our tools based on aggregate usage patterns
• Send you membership-related communications such as billing receipts and account notices

We do not use your information for advertising, behavioral tracking, or sale to third parties under any circumstances.

5. How We Share Your Information

We share your information only with the following third-party service providers who help us operate the Site, and only to the extent necessary for them to perform their services:

• Stripe — payment processing. Your payment data is governed by Stripe's Privacy Policy at stripe.com/privacy
• Memberstack — membership authentication and access management. Governed by Memberstack's Privacy Policy at memberstack.com/privacy
• Anthropic — AI processing of tool inputs to generate personalized outputs. Your tool inputs are transmitted to Anthropic's API and are subject to Anthropic's usage policies at anthropic.com/privacy
• Netlify — website hosting. Governed by Netlify's Privacy Policy at netlify.com/privacy

We do not sell, rent, trade, or otherwise transfer your personal information to any other outside parties.

6. Data Retention

We retain your account information for as long as your membership is active and for a reasonable period thereafter in case you choose to return. Payment records are retained as required by applicable tax and accounting law. Tool input data is not retained by Cold Ischemia Foundation after your session — it is transmitted to generate your output and is not stored on our servers. You may request deletion of your account and associated data at any time by contacting us at the email address below.

7. Cookies and Tracking

Our Site uses essential cookies necessary for basic site functionality and member authentication. We may use analytics tools that set cookies to help us understand how visitors use the Site in aggregate. We do not use advertising cookies or cross-site tracking cookies. You may disable cookies in your browser settings, but doing so may affect your ability to log in and access member content.

8. Children's Privacy

The Cold Ischemia Foundation Site and tools are intended for adults aged 18 and older. We do not knowingly collect personal information from anyone under the age of 13. If we become aware that we have collected information from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, please contact us immediately.

9. Security

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. Payment processing is handled entirely by Stripe, which maintains PCI-DSS compliance. Member authentication is managed by Memberstack. While we take security seriously, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Your Rights

Depending on where you live, you may have the following rights regarding your personal information:

• The right to access the personal information we hold about you
• The right to correct inaccurate information
• The right to request deletion of your personal information
• The right to withdraw consent where processing is based on consent
• The right to data portability where technically feasible

To exercise any of these rights, contact us at the email address below. We will respond to your request within 30 days.

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). You have the right to know what personal information we collect and how it is used, the right to delete your personal information, and the right to opt out of the sale of personal information. Cold Ischemia Foundation does not sell personal information. To make a CCPA request, contact us at the email below.

12. Third-Party Links

Our Site may contain links to external websites, research sources, or advocacy organizations. These third-party sites have their own privacy policies and we have no responsibility or liability for their content or practices. We encourage you to review the privacy policy of any site you visit from a link on our platform.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. If changes are material, we will make reasonable efforts to notify active members. Your continued use of the Site after changes are posted constitutes your acceptance of the updated policy.