Privacy Policy

1. Our Core Privacy Commitments

• No Selling of Personal Data: We do not sell your personal, financial, or health data to third parties.
• No General Browsing Trackers: Caeli only analyzes product details on e-commerce sites you actively visit to check for benefit eligibility. We do not track, read, or log your general web browsing or search history.
• Data Minimization: We only process the minimal data required to deliver our shopping assistance features directly to you.

2. How Caeli Works: Data Processing & Your Benefits

For most users, Caeli functions as an automated shopping guide. Here is how we process data to run these features for you:

To instantly show you if an item is eligible for HSA/FSA coverage, we perform the following checks:

• Product Eligibility Matching:When you view a product, Caeli matches the item's details against HSA/FSA databases as well as policies for your other benefit programs. To protect your privacy, this matching is processed locally on your browser whenever possible, or securely via our API, without building a personal shopping profile about you. To learn more about the specific technologies we use to keep Caeli running, please view our Cookie Policy.
• Extension Performance Diagnostics: To keep the extension fast, secure, and bug-free, we collect basic, non-identifying technical data (such as anonymized IP addresses, browser type, and error logs).

• Account Preferences: If you choose to create an optional account, we save your name and email address to preserve your customized benefit profile settings.
• Secured Wallet Assistance: To save you time during checkout, you can choose to link your HSA/FSA/LSA card. To ensure your financial data is completely secure, this transaction is handled entirely by our third-party payment partner, Stripe (a PCI-DSS Level 1 Service Provider). Caeli does not collect, receive, or store your credit card numbers or sensitive financial credentials on our servers. Stripe securely manages these credentials so you can enjoy secure, one-click checkouts.

3. How We Keep Caeli Free: Affiliate Transparency

Caeli is completely free for consumers. We earn revenue through affiliate partnerships with merchant brands.

How This Benefits You: When you actively choose to click on a Caeli product recommendation and make a purchase, the merchant pays us a referral commission.

To protect your trust, Caeli only initiates affiliate tracking links following a direct, conscious interaction by you. We never silently inject affiliate codes, use background tracking, or modify third-party links without your direct action. You can find a complete list of these affiliate tracking partners and manage your choices in our Cookie Policy.

Crucially: We never share any clinical information, answers to medical questionnaires, or health data with affiliate networks or merchants.

4. Optional "LMN" Feature: Strict Health Privacy (PHI & HIPAA)

This section applies only if you explicitly choose to utilize our optional Letter of Medical Necessity (LMN) feature to qualify a specific purchase.

Certain products require a doctor's note (an LMN) to legally qualify for HSA/FSA reimbursement. If you choose to use our optional LMN feature, Caeli acts as your secure, direct bridge to licensed clinicians who can evaluate your eligibility:

• Our Clinical Partners: Caeli is a technology platform, not a medical practice. We partner with a fully HIPAA-compliant telemedicine network of independent, licensed clinical providers who review your questionnaires and issue LMNs.
• Our HIPAA & BAA Commitment: Under our formal Business Associate Addendum (BAA) with our clinical partners, Caeli is legally classified as a Business Associate. We are strictly bound by federal HIPAA requirements to encrypt and secure your Protected Health Information (PHI).
• Your clinical information:When you complete a Letter of Medical Necessity questionnaire, your answers are encrypted in transit and sent to our clinical partners, who are the custodians of your medical record and are bound by HIPAA. We keep a copy of your questionnaire and your letter attached to the order they belong to. That letter is what makes your purchase eligible for HSA/FSA funds, so we hold onto it for as long as you might need it, whether that’s you asking us for a copy or the IRS asking you to substantiate the purchase. We do not build a separate database of your medical history, we never use this information for advertising, and we never share it with retailers.
• Clinical Independence: The clinical partners have sole authority over whether to grant an LMN based on their independent medical judgment. Our commercial merchant relationships have no bearing or influence on their clinical evaluations.

5. Secure Data Sharing & Disclosures

We only share personal data to execute the specific services you request:

• To Route Your LMN Requests:If you request an LMN, your intake answers are securely transmitted to our clinical partners' clinical network to complete your medical review.
• To Attribute Affiliate Sales: We share standard, non-clinical transaction IDs with merchant affiliate networks to verify referral sales. We never share your clinical data or LMN details with merchants.
• To Manage Our Infrastructure: We utilize highly secure cloud infrastructure providers (such as Amazon Web Services) that are contractually bound to keep our data secure.
• To Comply with Legal Obligations: If required by a valid legal process, subpoena, or regulation, we may disclose data to comply with the law.

6. Your Rights & Choices

Depending on your state or region (such as California under the CCPA/CPRA), you have complete control over your personal information:

• Access & Portability: You can request a record of the personal data we have collected.
• Deletion: You can delete your account yourself, at any time, from the Caeli app under Settings → Delete my account, or by contacting us. Deletion is permanent and cannot be undone.
  
  Deleting your account removes your sign-in, your profile (including your name, delivery address and benefit settings), your saved cart, and your entire chat history with Caeli, including any conversation you raised with our support team.
  
  We keep your past orders. An order record includes your email address, the delivery address it shipped to, and what you bought; we retain these for tax and accounting. If an order required a Letter of Medical Necessity, that record also includes the health questionnaire you completed and the letter itself, for the reasons described in Section 4. Our clinical partners separately retain their own medical records, as state clinical retention laws require.
• Opt-Out: You can control cookie preferences or uninstall the extension at any time via your browser settings.

7. Contact Us

If you have any questions, feedback, or wish to exercise your privacy rights, please reach out to us:

• Email: apps@getcaeli.com
• Address: Caeli, Inc., 809 Cuesta Dr Suite B PMB 1088, Mountain View, CA 94040