Menu
Privacy
State privacy addendum.
This addendum supplements the DoulaPaid Privacy Policy for residents of states with additional privacy or consumer health data rules.
How to make a request
Email privacy at doulapaid.com with your state, the right you want to exercise, and enough information for DoulaPaid to verify the account or interaction. Do not include client names, Medicaid IDs, dates of birth, visit notes, claim numbers, or private client details in the request. Washington consumer health data requests may also be sent to data-rights at doulapaid.com.
DoulaPaid verifies requests using information already associated with the account or interaction and will not require a person to create a new account solely to exercise privacy rights. Authorized agents may be asked to provide proof of authority and identity verification information permitted by applicable law.
California collection categories
In the preceding 12 months, DoulaPaid may have collected the following categories from California residents who visited the public website, created an account, used billing tools, or subscribed:
- Identifiers such as account email, IP address, device identifiers, and request metadata.
- Internet or electronic network activity such as pages viewed, state selections, searches, referrers, timestamps, and security events.
- Commercial information such as subscription plan, payment status, and app-store or Stripe subscription metadata.
- Professional or provider information such as practice name, NPI, provider enrollment identifiers, and billing contact details when a provider profile is created.
- Health-adjacent inferences from public guide views or tool choices related to Medicaid doula billing, pregnancy, birth, postpartum, reproductive health, or health care services.
State-specific notices
California
California Consumer Privacy Act, as amended by the California Privacy Rights Act
Rights
- Know and access categories and specific pieces of personal information.
- Delete personal information, subject to legal, security, and operational exceptions.
- Correct inaccurate personal information.
- Opt out of sale or sharing. DoulaPaid does not sell personal information or share it for cross-context behavioral advertising.
- Limit sensitive personal information where the law applies. DoulaPaid uses sensitive data only for requested services, security, legal compliance, and account operations.
- Non-discrimination for exercising privacy rights.
Response timeline
DoulaPaid responds to verifiable California requests within 45 days and may extend once by another 45 days after notice within the first 45-day period.
Appeal or complaint path
If a California request is denied, reply to the denial email or email the privacy inbox with the subject "California Privacy Appeal."
California residents may contact the California Privacy Protection Agency or California Attorney General where applicable.
Colorado
Colorado Privacy Act
Rights
- Confirm processing and access personal data.
- Correct inaccurate personal data.
- Delete personal data.
- Receive a portable copy of personal data.
- Opt out of sale, targeted advertising, or qualifying profiling. DoulaPaid does not sell personal data or use targeted advertising.
Response timeline
DoulaPaid responds to Colorado requests within 45 days and may extend once by another 45 days when reasonably necessary after timely notice.
Appeal or complaint path
If a request is denied, reply to the denial email or email the privacy inbox with the subject "Colorado Privacy Appeal." DoulaPaid responds to appeals within 45 days.
If an appeal is denied, Colorado residents may contact the Colorado Attorney General.
Connecticut
Connecticut Data Privacy Act
Rights
- Confirm processing and access personal data.
- Correct inaccuracies.
- Delete personal data provided by or obtained about the resident.
- Receive a portable copy of personal data.
- Opt out of sale, targeted advertising, or qualifying profiling. DoulaPaid does not sell personal data or use targeted advertising.
Response timeline
DoulaPaid responds to Connecticut requests within 45 days and may extend once by another 45 days when reasonably necessary after timely notice.
Appeal or complaint path
If a request is denied, reply to the denial email or email the privacy inbox with the subject "Connecticut Privacy Appeal." DoulaPaid responds to appeals within 45 days.
If an appeal is denied, Connecticut residents may contact the Connecticut Attorney General.
Virginia
Virginia Consumer Data Protection Act
Rights
- Confirm processing and access personal data.
- Correct inaccuracies.
- Delete personal data provided by or obtained about the resident.
- Receive a portable copy of personal data.
- Opt out of sale, targeted advertising, or qualifying profiling. DoulaPaid does not sell personal data or use targeted advertising.
Response timeline
DoulaPaid responds to Virginia requests within 45 days and may extend once by another 45 days when reasonably necessary after timely notice.
Appeal or complaint path
If a request is denied, reply to the denial email or email the privacy inbox with the subject "Virginia Privacy Appeal." DoulaPaid responds to appeals within 60 days.
If an appeal is denied, Virginia residents may contact the Virginia Attorney General.
Utah
Utah Consumer Privacy Act
Rights
- Confirm processing and access personal data.
- Delete personal data provided by the resident.
- Receive a portable copy of personal data.
- Opt out of sale or targeted advertising. DoulaPaid does not sell personal data or use targeted advertising.
Response timeline
DoulaPaid responds to Utah requests within 45 days and may extend once by another 45 days when reasonably necessary after timely notice.
Appeal or complaint path
Utah law does not provide the same appeal framework as several other state privacy laws. DoulaPaid still accepts reconsideration requests through the privacy inbox.
Utah residents may contact the Utah Division of Consumer Protection or Utah Attorney General where applicable.
Oregon
Oregon Consumer Privacy Act
Rights
- Confirm processing and access personal data.
- Correct inaccuracies.
- Delete personal data.
- Receive a portable copy of personal data.
- Opt out of sale, targeted advertising, or qualifying profiling. DoulaPaid does not sell personal data or use targeted advertising.
- Obtain a list of specific third parties to which personal data has been disclosed where the law applies.
Response timeline
DoulaPaid responds to Oregon requests within 45 days and may extend once by another 45 days when reasonably necessary after timely notice.
Appeal or complaint path
If a request is denied, reply to the denial email or email the privacy inbox with the subject "Oregon Privacy Appeal." DoulaPaid responds to appeals within 45 days.
If an appeal is denied, Oregon residents may contact the Oregon Attorney General.
Texas
Texas Data Privacy and Security Act
Rights
- Confirm processing and access personal data.
- Correct inaccuracies.
- Delete personal data provided by or obtained about the resident.
- Receive a portable copy of personal data.
- Opt out of sale, targeted advertising, or qualifying profiling. DoulaPaid does not sell personal data or use targeted advertising.
Response timeline
DoulaPaid responds to authenticated Texas requests without undue delay and no later than 45 days after receipt.
Appeal or complaint path
If a request is denied, reply to the denial email or email the privacy inbox with the subject "Texas Privacy Appeal."
If an appeal is denied, Texas residents may contact the Texas Attorney General.
New York
New York SHIELD Act and generally applicable privacy, consumer protection, and breach rules
Rights
- Request review of account information DoulaPaid maintains about the resident.
- Request deletion or correction where available under account, contract, or applicable privacy rules.
- Report suspected compromise of private information.
- DoulaPaid does not sell personal data, use targeted advertising, or use geofencing around health care locations.
Response timeline
DoulaPaid treats New York privacy and security requests as account or security requests and responds as promptly as reasonably possible.
Appeal or complaint path
If a New York request is denied, reply to the denial email or email the privacy inbox with the subject "New York Privacy Appeal."
New York residents may contact the New York Attorney General for privacy, consumer protection, or breach concerns.
New Jersey
New Jersey Data Privacy Act
Rights
- Confirm processing and access personal data.
- Correct inaccuracies.
- Delete personal data.
- Receive a portable copy of personal data.
- Opt out of sale, targeted advertising, or qualifying profiling. DoulaPaid does not sell personal data or use targeted advertising.
Response timeline
DoulaPaid responds to New Jersey requests within 45 days and may extend once by another 45 days when reasonably necessary after timely notice.
Appeal or complaint path
If a request is denied, reply to the denial email or email the privacy inbox with the subject "New Jersey Privacy Appeal." DoulaPaid responds to appeals within 45 days.
If an appeal is denied, New Jersey residents may contact the New Jersey Attorney General.
Maryland
Maryland Online Data Privacy Act
Rights
- Access personal data where the law applies.
- Correct inaccurate personal data.
- Delete personal data.
- Receive a portable copy of personal data.
- Opt out of sale, targeted advertising, or qualifying profiling. DoulaPaid does not sell personal data or use targeted advertising.
Response timeline
DoulaPaid responds to Maryland requests within 45 days and may extend once by another 45 days when reasonably necessary after timely notice.
Appeal or complaint path
If a request is denied, reply to the denial email or email the privacy inbox with the subject "Maryland Privacy Appeal." DoulaPaid responds to appeals within 45 days.
If an appeal is denied, Maryland residents may contact the Maryland Attorney General.
Washington
Washington My Health My Data Act and Washington privacy-law review
Rights
- Access and confirm consumer health data processing where MHMDA applies.
- Withdraw consent and request deletion of consumer health data where MHMDA applies.
- Appeal a denied consumer health data request.
- DoulaPaid does not sell consumer health data, use targeted advertising, or use geofencing around health care locations.
- Receive updated disclosures before any future Washington privacy-law process changes take effect.
Response timeline
DoulaPaid responds to Washington consumer health data requests within 45 days and may extend once by another 45 days when reasonably necessary after timely notice.
Appeal or complaint path
If a Washington request is denied, reply to the denial email or email the consumer health data inbox with the subject "Appeal - Consumer Health Data Request." DoulaPaid responds to appeals within 45 days.
If an appeal is denied, Washington residents may file a complaint with the Washington Attorney General at atg.wa.gov/file-complaint.
No sale, sharing, or geofencing
DoulaPaid does not sell personal data or consumer health data, does not share personal data for cross-context behavioral advertising, does not use targeted advertising or retargeting pixels, and does not use geofencing around health care locations to identify or track people seeking health care services. Hosting, security, email, payment, legal, compliance, and support providers may process limited information only to operate, secure, support, or legally maintain DoulaPaid.
Retention and exceptions
DoulaPaid retains personal data only as long as reasonably necessary for the requested service, account security, legal obligations, disputes, fraud prevention, payment records, audit evidence, or enforcement of agreements. Some requests may be limited by legal, security, tax, contract, backup, or records obligations.