Pearl of Mind Wellness Privacy Policy

Version 1.1 · Effective October 15, 2026 · Last updated October 15, 2026

The short version. We collect what we need to run your account, send emails you asked for, process payments, and understand how our website is used. We do not sell personal data, including sensitive data, and we do not use it for targeted advertising. We use a small number of service providers, listed below. Please don't send us information about your clients. You can ask us to see, correct, or delete your information at any time.

1. Who we are and what this policy covers

Pearl of Mind Wellness, LLC ("Pearl of Mind," "we," "us") is a New Jersey education company. This policy explains how we handle personal information when you use pearlofmind.com, subscribe to our emails, download free resources, create an account, or buy a membership (the "Services").

Some products have their own privacy notices. Daily Pearls is covered by the Daily Pearls App Privacy Policy. The Clinical Resource Assistant is covered in Section 6.

2. Information we collect

Information you give us

Account and membership: your name, email address, password (stored by our website platform, not visible to us), and the license information you confirm at sign-up. If we ask you to verify your license, we also collect your license type, state, and license number.
Purchases: your billing name and address, the plan you bought, and your payment history. Your card is processed by Stripe; we never see or store your full card number.
Email sign-ups and free downloads: your email address and, if you provide it, your name.
Messages: anything you send us by email or through a contact form.
Professional Spotlight: if you apply to be featured, what you submit through our intake form, such as your name, credentials, photo, and answers. The Spotlight Release covers how we publish it.

Information collected automatically

Website analytics: pages visited, time on page, referring site, device and browser type, and approximate location (city or region). These come from Squarespace Analytics.
Cookies: small files that keep you signed in, remember your cart, and measure site use. See Section 8.
Email activity: whether our emails are opened and which links are clicked, measured by Squarespace Email Campaigns.

3. How we use information

We use personal information to:

create and manage accounts, verify licenses, and provide the Services;
process payments, renewals, refunds, and receipts, and send required billing notices;
send newsletters and updates you signed up for (you can unsubscribe anytime);
answer your messages;
understand how the site is used so we can improve it;
enforce our terms and protect against fraud, account sharing, and misuse; and
meet legal, tax, and record-keeping obligations.

4. How we share information

We do not sell personal data, including sensitive data. We do not share personal data for targeted advertising. We share information only in these cases:

Squarespace. What they do for us: website hosting, accounts, member areas, forms, checkout, email campaigns, analytics. Information involved: account, purchase, sign-up, form, and usage information.
Stripe. What they do for us: payment processing. Information involved: payment card and billing information.
Google (Workspace). What they do for us: our email and intake forms. Information involved: messages you send us; Spotlight submissions.
Google (Cloud). What they do for us: Clinical Resource Assistant hosting, daily usage counters, and request logs. Information involved: network (IP) address, a random device ID, and request details such as time and browser type. Never the text you type.
Google (Gemini API). What they do for us: the AI models that write Clinical Resource Assistant drafts. Information involved: the de-identified descriptions you type and the drafts produced (see Section 6).
Google (Dialogflow). What they do for us: runs Pearl Assistant, an automated assistant that retrieves and summarizes information published on our website. Information involved: the messages you type in the chat and technical data such as browser type.
Google (reCAPTCHA Enterprise). What they do for us: protects our forms and login from automated abuse. Information involved: information about your device and browser.
Adobe (Fonts). What they do for us: provides the fonts our website uses. Information involved: page-view information, including your IP address and the page you visit.

These providers may use the information only to perform services for us, under their contracts and data-processing terms. We may also disclose information when the law requires it, to protect rights and safety, or as part of a sale or reorganization of our business. If our business is sold or reorganized, this policy continues to apply to information we already hold.

5. Information about your clients

Our website, accounts, and email are not places to share client or patient information. Please don't include names, identifying details, or health information about clients in messages or forms. If you send it anyway, we will use it only to respond, and then delete it. Resource Library handouts you give to clients are shared through your own systems, and we receive no information about those clients.

6. Clinical Resource Assistant

The Clinical Resource Assistant ("CRA") accepts de-identified descriptions only. Please never enter information that could identify a client or their family. The CRA Terms of Use and AI Use Policy, Section 5, lists what that includes.

What we keep. We never store the descriptions you type or the drafts the CRA produces, and our logs are built so they cannot record them. To detect abuse and apply daily limits, we keep usage counters tied to a random device ID and to a version of your network (IP) address that is pseudonymized using a secure, keyed one-way hash, so it is not stored in directly readable form. We delete these counters automatically after 7 days. Our application logs record the same pseudonymized value, never the text you type, and are kept for up to 30 days. Separately, our hosting provider, Google Cloud, keeps a standard log of each request for 30 days, used only for reliability and security. That log holds your actual IP address, browser type, and the time, but never the text.

What stays in your browser. The current draft stays until you close the tab, press Clear or New Resource, or leave it inactive for 30 minutes. A random device ID and the version of the notice you accepted stay until you clear your site data.

Our AI provider. Your descriptions and the drafts are processed by Google's Gemini API. Under Google's paid-service terms:

Google does not use them to train its models.
Google keeps them for 55 days to detect abuse, and authorized Google staff may review content its systems flag.
Google may briefly process or cache this data outside the United States.

Google does not sign a Business Associate Agreement for this service, and Pearl of Mind is not a HIPAA business associate.

If our first, automated check detects identifying information, the CRA halts the request within our application runtime and transmits nothing to Google's Gemini AI service. A second check is performed by Google's Gemini model; any text evaluated during this second check has already been transmitted to Google's Gemini AI service and is retained for abuse monitoring as described above, even if the check halts drafting. Screening checks cannot guarantee detection of all identifiers. Any information missed by both checks is likewise processed by Google's Gemini AI service and retained under their policies. We cannot retrieve or delete that data because Pearl of Mind never stores prompt text, and third-party API retention schedules are outside our control.

7. Sensitive information

We don't ask for information about your own health, and the Services are not designed to collect it. Please don't share it in the Pearl Assistant chat, which answers only questions about our products and website. If you choose to share it (for example, in a message), we use it only to respond to you. We never sell it or use it for advertising.

8. Cookies and analytics

We use:

Essential cookies from Squarespace, which make sign-in, checkout, and security work.
Analytics cookies from Squarespace, which show us how the site is used.

You can block or delete cookies in your browser. We don't use advertising or retargeting cookies, and we don't use Google Analytics.

We also use browser storage (local storage and session storage), which is separate from cookies. On the Clinical Resource Assistant page, local storage holds a persistent, randomly generated identifier for your device, used for daily limits and security, along with the version of the notice you accepted. It stays until you clear your site data. Session storage holds your current draft until you close the tab, press Clear or New Resource, or stay inactive for 30 minutes.

Pages also load standard fonts and code libraries from trusted content delivery networks (including Google Fonts and jsDelivr). When your browser requests these resources, these providers receive your IP address solely to transmit the requested technical files to your browser.

9. How long we keep information

Account profile information (name, email, settings): while your account is open, then up to 3 years after it closes.
Terms-acceptance records (account email, date and time, and the version of each document you accepted): 7 years after your account closes.
License-verification record (name, license type and number, issuing state, verification date, and expiration date): 7 years after your account closes.
Documents you send us to verify your license (for example, a scan of a license): deleted within 1 year after your account closes. The verification record above is kept.
Purchase and billing records, including consent to auto-renewal: 7 years, for tax and legal records.
Email list information: until you unsubscribe. Afterward we keep only your email address on a do-not-email list.
Messages to us: up to 2 years, unless needed longer for a legal reason. Client information is deleted as soon as we see it (Section 5).
Squarespace Analytics data: as set by Squarespace's analytics retention policy.
Spotlight submissions: as described in the Spotlight Release.
Clinical Resource Assistant text (descriptions and drafts): not stored by us. Kept in your browser until cleared or after 30 idle minutes. Kept by Google for 55 days (Section 6).
Pearl Assistant chat messages: not logged. We have turned off chat logging and conversation history, so Google processes each message only to answer it.
Clinical Resource Assistant usage counters: 7 days.
Clinical Resource Assistant request logs (IP address, no text): 30 days.

10. Your choices

Wherever you live, you can ask us to:

access the personal information we have about you, or get a copy of it;
correct information that is wrong;
delete your information, except what we must keep for legal or billing records; and
stop marketing emails (you can also use the unsubscribe link in any email).

Email support@pearlofmind.com from the address on your account. We may need to confirm your identity. We will respond within 45 days. If we deny a request, we'll explain why, and you can appeal by replying to our response. We will not treat you differently for making these requests. We do not sell personal data or use it for targeted advertising, so there is nothing to opt out of for those uses.

We voluntarily offer these data choices to our users as a courtesy. Providing these options does not mean, nor should it be construed to mean, that Pearl of Mind is subject to the New Jersey Data Privacy Act or any other state, federal, or international privacy statute. We reserve the right to verify your identity and to limit or deny requests where permitted or required by law (including to retain records necessary for legal defense, dispute resolution, security, and statutory compliance).

11. Security

We protect information with safeguards appropriate to its sensitivity. These include encrypted connections (HTTPS), access controls, and reputable service providers. No method of storage or transmission is perfectly secure. Please use a strong, unique password. If a breach affects your personal information, we will notify you and the authorities as the law requires.

12. Children

The Services are for adults 18 and older. They are not directed to children, and we don't knowingly collect information from anyone under 18. If we learn that we have, we will delete it. Contact us if you believe a child has given us information.

13. Where information is processed

We are based in the United States, and our service providers process information in the United States, except that our AI provider may briefly process or cache Clinical Resource Assistant requests in other countries (Section 6). Our paid Services are available only to people in the United States. If you use the Services from outside the US, your information will be handled under US law.

14. Changes to this policy

We will post updates here with a new "Last updated" date. For material changes, we will email account holders at least 30 days in advance.

15. Contact

Pearl of Mind Wellness, LLC
support@pearlofmind.com
91 Pompton Ave, Ste 93 #1015, Cedar Grove, NJ 07009