LAST UPDATED OCTOBER 30, 2026
Your privacy.
Your choices.
Toven Health is operated by Longstreet Partners LLC. This notice covers our website, launch and Black Friday signups, browsing cart, website analytics, and general support communications. You can pay for an initial order online. We email the secure medical-intake link after payment. A separate Stripe test checkout uses simulated payments only. Use synthetic information there, never real card or health information. Stripe processes submitted test data in its sandbox. A secure, temporary cookie links the test result to your browser; no Asher order is created. The website and signup forms are intended for adults aged 18 and older.
What we collect
When you join the list, we store your email address, any optional product interest you select, the date you signed up, and a record of your agreement to receive launch updates. Please do not submit medical information. To limit spam, we temporarily store salted, hashed rate-limit identifiers for email addresses and, when available, network addresses. These expire within two hours and are removed by scheduled maintenance. Hosting providers may process technical information needed to operate and protect the website.
General support
If you email us, we receive your email address, message, and any attachments you choose to send. We use these to respond and manage your request. Do not send medical records, identity documents, passwords, or payment-card details to our general inbox. Our support panel provides fixed answers and an email link; it does not collect a free-text chat conversation or send questions to an AI model.
How we use it
We use the list and optional product selections to understand demand and share relevant Toven launch news, program details, and pricing. Signing up does not create a patient relationship or enroll you in treatment. We do not sell your signup information.
Where it is stored
The website uses OpenAI Sites and Cloudflare infrastructure to host the site and store signup records. Access to signup data is limited to site administration and supporting service providers. For new signups from September 22, 2026, a signup notification containing your email address and optional selected product interest is sent to the Toven administrator’s work inbox at Nextwave. If you leave the interest field at its default, the notification says General launch updates. Product interests from earlier signups remain excluded from email notifications. Email providers also process these notifications, which may remain in the administrator’s mailbox until deleted.
Black Friday reminders
If you join the Black Friday list, we record your email and signup date to send the event reminder and early-access details. Existing launch-list members can opt into this event without changing their product interest. New Black Friday-only signups are identified separately from general launch updates. An internal signup notification may be sent to our administrator. Unsubscribing removes your waitlist record, including the Black Friday signup. Self-service unsubscribe does not automatically erase previously delivered administrator email notifications; contact us to request their removal.
Referral and creator program
When you apply, we store your name, email, optional social handle or website, application date, agreement version, assigned code, and review status. We use these to review and administer partnerships and contact you about your application. This does not opt you into marketing. An active referral link or code is saved in this browser tab’s session storage until the tab closes or you remove it. If you start checkout with a code, it is attached to the order and Stripe payment metadata for internal campaign attribution. We do not provide creators with customer identities, contact details, products, medical information, or individual orders. Application records are kept while reviewing and administering the program, subject to removal requests and applicable recordkeeping needs. Removal requests can be sent to hello@tovenhealth.com. Order-linked attribution is retained with the order for support and accounting.
Your browsing cart
When you add a product, we save its identifier and your one-time or subscription preference in this browser tab’s session storage so your cart survives navigation and refreshes. This cart is not sent to a medical provider or analytics service. It normally clears when the tab closes. You can remove items at any time. The collection finder does not persist your main-interest answer. If you choose an area or request optional training in the finder, we save that coarse location and training preference in this browser tab’s session storage. We use them to show NYC services and preselect training for products you explore. You can change each product’s selection or revisit the finder to change the browsing preference. Existing cart selections take precedence. We do not collect a street address in the finder or send these answers to analytics. Your analytics choice is saved in browser local storage so we can remember it across visits. Browser storage may be accessible to someone else using the same browser profile.
Optional NYC training requests
We store your training selections and optional New York preference in this browser tab’s session storage. When you complete an order with training selected, the selected product identifiers are retained with the order, included in Stripe checkout metadata, and used to create a training inquiry. We also use the shipping state from confirmed checkout details to show relevant NYC appointment options on your confirmation page and optional account. A New York state address does not establish that you are within the NYC service area. Requests made after payment are stored with your order reference. We notify the Toven administrator to arrange follow-up about suitability, price and scheduling. These requests do not book treatment, authorize payment, opt you into marketing, or automatically send your information to Christina. You can cancel a saved request from the confirmation page or account, or contact hello@tovenhealth.com. Request records are retained for support alongside the associated order; access and deletion requests follow the process below.
Traffic sources and private sales reporting
After you allow analytics, we save a fixed traffic-source label and its capture time in your browser for up to 30 days. We keep the last known external source when you return directly. The label can accompany a checkout request and be stored with your order for private reporting of checkout starts, confirmed payments, and gross amounts by source. These order records, payment amounts, order identifiers, and treatment information are not sent to Google Analytics, Ahrefs, or Metricool. Declining clears the saved browser label and stops it from accompanying future checkouts; it does not delete existing order records. Reports may include unknown or unattributed sources and cannot reliably distinguish Google AI results from ordinary Google Search.
Analytics and your choices
On our public homepage and privacy page, Google Analytics uses advanced consent mode. Before you make a choice, and if you decline, Google receives limited cookieless measurement signals without storing or reading Google Analytics cookies. These signals support aggregate measurement and modeling; they do not provide a complete count of individual visitors. Google still receives technical request information, including your network address and browser information. Cookieless does not mean no data is transmitted.
If you select Allow analytics, Google Analytics may use analytics cookies, and we also enable Ahrefs Analytics and Metricool. Advertising storage, advertising personalization, Google signals, and automatic form, search, link, and other enhanced interaction tracking are disabled. We send only a fixed homepage or privacy-page address and title, an empty referring-page value, and fixed traffic-source labels for recognized search engines, AI assistants, and social services. Referrer URLs and queries are used in your browser only to choose these labels; their original values are not sent. General newsletter signups may send a sign_up event after successful registration and analytics consent, without email or product interest. We do not forward arbitrary URL parameters or fragments, emails, customer identifiers, medical information, treatment selections, or form contents.
Product, collection, educational article, NYC service, intake, account, cart, checkout, and unsubscribe pages are excluded from analytics. Ahrefs and Metricool run only after permission, in an isolated frame that cannot read our forms, cart, account data, or treatment links. Ahrefs receives the canonical homepage or privacy-page address; Metricool receives only the frame address with a fixed home or privacy label. These reports do not cover the full purchase or care journey.
You can change your choice using Cookie settings. Declining or withdrawing permission removes our Google Analytics cookies and stops future Ahrefs and Metricool collection in this browser. Limited cookieless Google measurement continues on the two public pages. Your choice does not affect use of the site. Existing visitors are shown an updated notice explaining this change.
Customer accounts
Optional customer accounts use ChatGPT sign-in. Our hosting platform supplies a verified account identifier and email address; Toven does not receive your password. We match that email to the email provided in a confirmed Stripe payment, then bind the order to your account identifier. The portal displays order details and lets you request or cancel refill assistance. We store those requests and notify our administrator using the order reference, without medical details. Requests do not authorize treatment or payment. Account and request records are retained as needed for customer support and the order-record purposes below. Contact us for access or deletion requests. Medical records and pharmacy tracking are not connected to this portal.
Medical intake and payments
When you follow a secure medical intake link from your verified payment-confirmation page, confirmation email, or our team, the clinical provider and pharmacy organizations identified in that flow handle the information you submit there under their own notices and agreements. Review those notices before submitting health history, identity documents, or payment information. This website does not receive medical intake records through an API. At online checkout, Stripe collects payment, contact, and shipping information, including a required phone number. Your phone number is retained with your checkout details in Stripe and is available to Toven for order support, intake follow-up, and fulfillment coordination. Providing a phone number does not enroll you in promotional text messages. Toven stores the selected products, purchase preference, total, order reference, payment status, and notification status. Card details are handled by Stripe and are not stored on this website. We use your order details to arrange manual intake follow-up, support, refunds, and fulfillment coordination. An administrator notification contains the order reference and amount, with details available in Stripe. A temporary secure cookie links the payment result to your browser. Order and payment records are retained as needed for fulfillment, refunds, accounting, disputes, and applicable obligations. This notice is not a clinical provider’s HIPAA Notice of Privacy Practices. We will update the disclosures before enabling new account, payment, or medical-data integrations.
Optional order texts
If you separately opt in at checkout when texting is available, we store the consent version and time, your order reference, phone number, and shipping state for order messages and secure-form reminders. Cloudflare stores the message queue, delivery status, and opt-out or pause records. Twilio processes phone numbers and message contents for carrier delivery. Toven stores reply categories, such as STOP or DONE, rather than medical message contents. Providing a phone number alone is not SMS consent. We do not sell or share mobile opt-in information for third-party marketing. Reply STOP to opt out or HELP for help; other replies pause automated follow-ups. See our text message terms. Contact us for access or removal requests; limited suppression records may be retained so we continue to honor an opt-out.
Security and retention
We use access controls and technical safeguards to protect the information we handle. No website, email service, or storage system can guarantee absolute security. Signup records are retained while the launch list is active unless removed. Support correspondence and technical records may be retained as needed to resolve requests, protect the service, and meet applicable obligations. Copies held in provider backups may remain until their normal backup cycle expires.
Your choices
Every launch email will include an unsubscribe link. You may also return to this website to find removal instructions. We keep your signup while the launch list is active, unless you request removal.
Questions and removal requests
Email hello@tovenhealth.com. For removal requests, write from the address you registered with. Please do not send health records or medical details to this general questions inbox. You can request access, correction, or deletion of information you provided, or withdraw launch-marketing consent. We may verify that you control the registered email before acting. We process requests subject to applicable requirements and any records we must retain. For a deletion request, we will also address associated administrator notifications; this is a manual process, separate from self-service unsubscribe. Requests about records submitted directly to a clinical provider or Asher should also be directed to that organization through its published privacy channel.
Read our medical, product, and pricing disclosures →
Changes
If the website begins offering clinical services, any additional data collection and applicable privacy information will be explained before you enroll.