Privacy Policy

Stem Cell Navigator ("Stem Cell Navigator," "we," "us") operates the website at stemcellnavigator.com and related pages, including the Clinic Partner Portal. Stem Cell Navigator is currently operated by Joshua Volden as a sole proprietorship based in California, United States. It is not a corporation or LLC.

This policy explains how we handle personal information when you visit the site, contact us, sign up for updates, or use the Clinic Partner Portal. For privacy questions or requests, contact stemcellnavigator@gmail.com.

Stem Cell Navigator does not provide medical care, diagnosis, treatment or personalized medical advice, and we are not a healthcare provider. We do not run a patient intake or keep patient charts. Because we are not a healthcare provider or a business associate of one, we do not describe our service as HIPAA-covered.

Our public forms are intentionally designed not to ask about conditions, symptoms, treatment history or other health details. Please do not include medical records, test results, diagnoses or other sensitive health information in our contact forms, emails or messages. If you send it anyway, we may delete it and will not use it to give medical advice.

Information you give us

• Talk to a Navigator enquiries: your name, email address, optional phone number, the general topic you choose, and your separate choices about whether we may reply by email, SMS, WhatsApp, or send updates.
• Briefing / launch list: your email address, the content preferences you select (such as topics, regions, frequency and language), and a record of when and to which consent wording you agreed.
• Clinic access requests (For Clinics): business contact information such as clinic name, city, country, website, your name, role, business email, optional phone, a message and your language.
• Clinic Partner Portal accounts: for invited clinic users, your email address, login credentials (passwords are handled by our authentication provider; we do not see them in plain text), the clinic you belong to and your role (owner, editor or viewer).
• Clinic submissions: information authorized clinic users enter about their organization (for example, credentials, laboratory and regulatory records, protocols and pricing), documents they upload, feedback and requests, and an edit history. This information is about the business; it should not contain patient-identifiable information.
• Messages: if you email us, or message us through a channel we have enabled, we receive the content and your contact details.

Information collected automatically

• Technical data our hosting and infrastructure providers process to deliver and secure the site, such as IP address, browser type, device information, pages requested and timestamps, which may appear in server and security logs.
• To limit spam and automated signups, we store a one-way hashed (not readable) form of the network address used when submitting certain forms.
• Preferences stored in your own browser (see Cookies and browser storage).

Information from other sources

• Publicly available information about clinics and providers (such as official websites, regulator records, trial registries and publications) used to build provider profiles. These records describe organizations; we do not publish the names of individual staff we contact.
• Payment status information from our payment processor (see Payments).

• To operate, maintain and improve the website and Clinic Partner Portal.
• To respond to enquiries using the channels you agreed to.
• To send the briefing or updates you signed up for, once those are launched, and to honor unsubscribe requests.
• To review clinic access requests manually, issue invitations, manage accounts and support clinic onboarding.
• To research, verify and present provider information, keeping provider claims separate from independently verified facts.
• To process subscription billing for clinics that choose a paid plan.
• To prevent spam, fraud and abuse, secure accounts, and comply with legal obligations.
• To send internal operational alerts to our own team. These alerts are designed not to include message content or full contact details.

Paid subscriptions, sponsorship or payment status never affect a clinic's verification status, evidence grade, transparency score or ranking.

We disclose personal information only as described here:

• Service providers that help us run the service under our instructions, including website hosting and development (Lovable and its infrastructure providers), database, authentication and file storage, payment processing (Stripe), email delivery, web fonts (Google Fonts) and map tiles (OpenStreetMap). These providers may process technical data such as your IP address when your browser loads their content.
• Clinic teams: information a clinic user submits is visible to authorized members of that same clinic and to our administrators. Clinics cannot see other clinics' private submissions.
• Legal and safety: when required by law, legal process, or to protect the rights, safety and security of users, the public or Stem Cell Navigator.
• Business changes: if the business is reorganized, sold or transferred, information may be transferred as part of that transaction, subject to this policy.
• With your direction: for example, if you ask us to connect you with a provider.

We do not sell personal information for money. We do not currently use advertising pixels, behavioral advertising networks or cross-context behavioral advertising, as far as we are aware from reviewing our site. If that changes, we will update this policy and provide any required opt-out first.

Clinic subscription payments, when enabled, are processed by Stripe. Card details are entered on Stripe's checkout and billing pages; we do not receive or store full card numbers. We store limited billing records such as plan, subscription status, billing period and Stripe customer and subscription identifiers. Stripe's handling of your information is described in the Stripe Privacy Policy.

• Language preference: a small cookie and browser storage entry remember your chosen language.
• Saved items and comparisons: stored only in your browser; not sent to us or tied to your identity.
• Sign-in: if you sign in to the Clinic Partner Portal or administration area, your browser stores session information needed to keep you signed in.

We do not use analytics or advertising cookies of our own. Our hosting provider may collect aggregated traffic statistics needed to operate the site. Third-party content (such as embedded videos) may set its own cookies. You can clear or block cookies and site data in your browser settings; some features may then not work.

We link to our official profiles on Instagram, TikTok and YouTube, and some patient journey pages may display an official embed (for example, a TikTok video) where permitted. When an embed loads, or when you follow a link, that platform may collect information about you under its own privacy policy. We do not control those practices, and we encourage you to review them.

Provider profiles and guides link to clinic websites, regulators and publications. This policy does not apply to third-party sites.

We keep personal information for as long as reasonably needed for the purposes described above — for example, while an enquiry is being handled, while you remain subscribed, or while a clinic account is active — and as needed to resolve disputes, keep business and tax records, and meet legal obligations. We have not set fixed deletion schedules for every category yet. When information is no longer needed, we delete it or de-identify it. You can ask us to delete your information at any time (see below).

We use reasonable measures to protect information, including access controls that limit private records to authorized administrators and clinic members, invitation-only clinic accounts, a private document store accessed through time-limited links, and spam and rate-limit protections. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please keep your login credentials confidential and tell us promptly at stemcellnavigator@gmail.com if you believe your account has been compromised.

Wherever you live, you can ask us to:

• tell you what personal information we hold about you and provide a copy;
• correct inaccurate information;
• delete your information;
• stop sending you updates or messages (you can also use any unsubscribe option we provide).

How to request: email stemcellnavigator@gmail.com with the subject "Privacy request," the type of request, and the email address or phone number you used with us. To protect you, we will verify your request, usually by confirming it from the email address on file or asking for limited additional information. An authorized agent may make a request on your behalf with proof of authorization.

Exceptions: we may keep certain information where needed to complete a transaction, protect security, prevent fraud, comply with law, keep required business or tax records, or exercise legal rights. Clinic business records and documentation submitted for verification may be retained as part of the provider's verification history, while personal contact details can still be removed. We will explain if we cannot fully honor a request.

We will not discriminate against you for exercising your privacy rights.

California law, including the California Consumer Privacy Act as amended (CCPA), gives California residents rights to know, access, correct and delete personal information, to opt out of the "sale" or "sharing" of personal information, to limit use of sensitive personal information, and not to be discriminated against for exercising these rights. Some of these obligations apply only to businesses that meet certain thresholds; we describe our practices here regardless, and you can use the request process above.

• Categories collected in the last 12 months: identifiers (name, email, phone, account identifiers, hashed network address); professional information (clinic name, role, business details); commercial information (subscription and billing status); internet activity (technical log data processed by our providers); and preferences and consent records.
• Sources, purposes and recipients: as described in sections 3–5.
• Sale and sharing: we do not sell personal information, and we do not knowingly "share" it for cross-context behavioral advertising.
• Sensitive personal information: we do not ask for it in public forms. Account passwords are handled by our authentication provider and used only to sign you in. We do not use sensitive information to infer characteristics about you.
• Shine the Light: we do not disclose personal information to third parties for their own direct marketing.

Stem Cell Navigator is intended for adults. We do not knowingly collect personal information from children under 13, and our forms are not intended for anyone under 18. If you believe a child has sent us personal information, contact stemcellnavigator@gmail.com and we will delete it.

We are based in the United States, and our service providers may process information in the United States and other countries where they operate. Data-protection laws there may differ from those where you live. By using the site, you understand your information may be processed in those locations. If local law gives you additional rights, contact us and we will respond as required.

We may update this policy as the service changes, including when we launch planned features such as email briefings or additional messaging channels. We will post the updated version here with a new effective date, and where changes are significant we will provide additional notice where appropriate.

Stem Cell Navigator — operated by Joshua Volden (sole proprietor), California, USA
Email: stemcellnavigator@gmail.com
Website: stemcellnavigator.com

See also our short privacy summary. Nothing on this site is medical advice.