Privacy Policy

Effective: June 25, 2026 · Last updated: June 25, 2026

1. About this policy

This Privacy Policy describes how Dewy, Inc. ("Dewy," "we," "us," or "our") collects, uses, shares, and protects information when you visit our website at dewy.io, interact with our marketing tools (including the Revenue Lift Calculator at /playbook), or otherwise engage with us. It applies to information collected through our public marketing properties.

It does not cover information that our customers (healthcare practices) collect from their own patients using the Dewy product. That information is handled under a separate agreement with each practice and, where applicable, in accordance with the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and its implementing regulations.

2. Information we collect

Information you provide

When you interact with our website, you may give us:

• Contact details — your name, email address, phone number, and practice name.
• Practice information — your specialty (e.g., dermatology, eye care), the services you offer, and other details you enter into the Revenue Lift Calculator or any other form.
• Communications — messages you send to us (for example, through a demo request, email, or scheduling tool).
• Account information, if you become a Dewy customer (handled under a separate Master Services Agreement).

Information collected automatically

When you visit our website, we and our service providers may automatically collect:

• Device and connection data — IP address, browser type and version, operating system, device type, screen size, language, and time zone.
• Usage data — pages visited, time on page, referring URL, links clicked, and similar engagement information.
• Marketing attribution — UTM parameters and referral sources to understand which campaigns brought you to us.

Information from third parties

We may receive information about you from analytics, advertising, and CRM providers (see Section 4), and from publicly available sources such as your practice's public website or business directory.

3. How we use your information

We use the information described above to:

• Provide what you asked for — generate and deliver the Revenue Lift Calculator playbook, schedule a demo, or respond to your inquiry.
• Communicate with you — send transactional emails (like the playbook itself), product updates, sales follow-ups, and marketing nurture emails about Dewy. You can opt out of marketing emails at any time.
• Run and improve our website — measure how visitors use the site, troubleshoot issues, and improve our content and product.
• Personalize our communications and marketing based on your specialty and stated interests.
• Comply with law and protect rights — meet legal obligations, enforce our Terms, and protect Dewy, our users, and the public from fraud, abuse, or harm.

The legal bases we rely on for these uses (where applicable) include your consent, the performance of a contract, our legitimate interests in running and growing our business, and compliance with legal obligations.

4. How we share your information

We do not sell your personal information. We share it only with the following categories of recipients:

Service providers (sub-processors)

We use the following providers to help operate our website and marketing. Each is bound by contractual terms requiring them to protect your information and use it only for the purposes we authorize:

Business transfers

If Dewy is involved in a merger, acquisition, financing diligence, asset sale, reorganization, or similar transaction, your information may be shared with prospective or actual buyers, investors, advisors, and successors. We will require recipients to honor the commitments in this Policy.

Legal and safety

We may disclose information when we believe in good faith that disclosure is necessary to comply with a legal obligation, respond to lawful requests from public authorities, enforce our Terms, or protect the rights, property, or safety of Dewy, our users, or others.

With your consent

We will share your information with other third parties when you direct or authorize us to do so.

5. Cookies and tracking technologies

We and our service providers use cookies, pixels, and similar technologies to operate the site, remember preferences, measure performance, and run advertising. Cookies fall into these categories:

• Strictly necessary — required to operate the site (e.g., session security).
• Analytics — help us understand traffic and usage patterns (Google Analytics 4, Ahrefs Web Analytics).
• Marketing — measure ad performance and enable retargeting (Meta Pixel).

You can control cookies through your browser settings. Most browsers let you block or delete cookies, though doing so may affect site functionality. You can also opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, and you can manage Meta advertising preferences in your Facebook ad settings.

We currently do not respond to "Do Not Track" browser signals because there is no consistent industry standard.

6. How long we keep information

We keep personal information for as long as needed to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements. Typical retention windows:

• Marketing leads — up to 3 years from your last interaction, unless you ask us to delete sooner.
• Customer records — for the duration of your subscription plus the period required by tax and corporate-records laws (typically 7 years).
• Analytics — retained per the defaults of the underlying provider (e.g., Google Analytics 4: 14 months).

7. How we protect information

We use industry-standard administrative, technical, and physical safeguards to protect personal information, including encryption in transit (TLS), encryption at rest with our sub-processors, role-based access controls, and reasonable internal access policies. No system is perfectly secure, however, and we cannot guarantee absolute security.

8. Your privacy rights

Subject to applicable law, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your personal information.
• Restrict or object to certain processing.
• Receive a portable copy of your information in a commonly used format.
• Withdraw consent where we rely on consent as a legal basis.
• Opt out of marketing at any time by using the unsubscribe link in any marketing email or by contacting us.

To exercise any of these rights, email us at privacy@dewy.io. We will verify your request before responding and will reply within the period required by applicable law.

9. Notice for California residents

This section provides additional disclosures required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA").

Categories of personal information we collect

In the past 12 months we have collected the following categories of personal information about California residents:

• Identifiers (name, email, phone, IP address)
• Customer records (practice name, business contact info)
• Commercial information (services offered, interest in Dewy)
• Internet or network activity (browsing and interaction with our site)
• Geolocation data (approximate, derived from IP)
• Inferences drawn from the above (e.g., interest segment)

Sources, purposes, and disclosures

We collect this information directly from you, automatically from your device, and from our service providers. We use it for the purposes described in Section 3 and disclose it to the recipient categories described in Section 4.

Sale and sharing of personal information

We do not sell personal information. We "share" personal information (as defined under CPRA, meaning disclosure for cross-context behavioral advertising) with Meta when our Meta Pixel is active. You may opt out of this sharing at any time using the "Do Not Sell or Share My Personal Information" mechanism available on request from privacy@dewy.io, or by disabling third-party cookies in your browser.

Sensitive personal information

We do not knowingly collect "sensitive personal information" as defined under CCPA/CPRA through our marketing website.

Your California rights

California residents have the rights described in Section 8, plus the right to opt out of sale and sharing, and the right to limit the use of sensitive personal information. You may also designate an authorized agent to make a request on your behalf.

10. Notice for other US states

If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, or another US state with a comprehensive consumer privacy law, you have rights similar to those described in Sections 8 and 9. To exercise any of those rights, email us at privacy@dewy.io. You may also have the right to appeal a refusal of a request — please reply to our initial response to begin an appeal.

11. International users

Dewy is based in the United States. If you access our website from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States, which may have data-protection laws different from those of your country. By using the site you consent to this transfer.

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have rights under the GDPR and equivalent UK and Swiss law. The legal bases we rely on are described in Section 3. You may lodge a complaint with your local data protection authority.

12. Children

Our website and tools are intended for businesses and adults. We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us personal information, please contact us so we can delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be announced through our website or email.

14. How to contact us

If you have questions about this Privacy Policy or want to exercise a privacy right, contact us at:

Dewy, Inc.
Attn: Privacy
Email: privacy@dewy.io