Privacy Policy
Last updated 2026-06-01
This Privacy Policy explains what information Generative Inspired Inc. dba ClearPrice Health™ collects when you use the Site, how we use it, and the choices you have. We keep personal data collection limited: you do not need to create an account or tell us who you are to look up hospital prices.
1. Information we collect
Public-site browsing. When you visit pages on the Site, our hosting provider may automatically log standard request information — IP address, user agent, page requested, referring URL, and timestamp — for operational, security, and abuse-prevention purposes. We do not associate this with any account or persistent identifier maintained by us.
County-level search counts. To measure demand, the Site counts how many visitors search for each procedure in each Colorado county. When you run a search, we read your IP address, use it only to determine your county, and then discard or truncate it. We store only an aggregate count per procedure and county. We do not keep your full IP address alongside your search, we do not locate you more precisely than county, and we do not link these counts to the analytics cookies or to any other identifier. Because the counts are aggregated and not tied to you, they cannot be used to identify you.
Analytics. The Site loads one analytics script on public pages:
- Google Analytics 4 — counts page views and basic visit metadata (device type, coarse region, referrer), configured with Google Consent Mode v2 to deny all advertising storage and signals. Google Signals and granular location collection are disabled, and data retention is set to the 2-month minimum. GA4 does not log full IP addresses. Sets first-party
_gaand_ga_*cookies for aggregate unique-visitor counts; visitors who send Global Privacy Control get a cookieless ping and no cookie. Google processes the data per their own terms; see Google’s privacy policy. Because we disable Google Signals, these events are not joined to your Google account or used to build a cross-device profile.
We do not run any other trackers — no LinkedIn Insight Tag, no Meta/Facebook pixel, no TikTok pixel, no Google Ads pixel, and no programmatic display advertising.
How to block this. Google Analytics respects standard client-side blocking. Browser tracking-protection (Firefox, Safari) and any well-known blocker extension (uBlock Origin, Privacy Badger, DuckDuckGo Privacy Essentials) will drop the requests before they leave your device. The Site continues to work without them. We honour browser-level Do-Not-Track signals where the upstream tool supports it, and we honour the Global Privacy Control automatically — see our Do Not Sell or Share disclosure for the formal statement and verification steps.
Email correspondence. If you email us a correction, question, or other communication, we will retain that email and any information you include in it for the purpose of responding and improving the Site. We do not add you to any marketing list.
1a. Notice at Collection (Colorado Privacy Act)
This table summarises the categories of personal information we collect, the sources, the purposes, the recipients, and how long we retain each category — required by the Colorado Privacy Act and similar state laws.
| Category | Source | Purpose | Recipients | Retention |
|---|---|---|---|---|
| Internet activity (IP, user-agent, page, referrer) | Automatic via HTTP request logs | Operations, security, abuse-prevention | Hosting provider only (no third-party sale or share) | ≤ 90 days in operational logs |
| Approximate location — county derived from IP (procedure search counts) | IP address read from your request at search time | Count procedure searches per county (aggregate demand metrics) | No one outside the Company; not sold or shared in a form that identifies you | IP not retained (used only to derive county, then discarded or truncated); only aggregate county counts kept |
Analytics identifiers (pseudonymous; _ga cookie) | First-party cookie set by Google Analytics | Aggregate page-view counts | Google (data processor) | Google event retention set to 2 months (minimum) |
| Email address (if you write to us) | Voluntary, when you email a correction or question | Reply to your message; correction tracking | Email provider (data processor); hospital named in correction (if relevant) | Operational; deleted on request |
We do not currently sell or share any of these categories for cross-context behavioral advertising. See our Do Not Sell or Share disclosure for the formal statement.
1b. Cookies
The site sets these cookies. None are used for advertising. Visitors who send Global Privacy Control are set no analytics cookies — GA4 runs in a cookieless, aggregated mode for them.
| Name | Category | Expiry | Purpose |
|---|---|---|---|
_ga | Analytics (first-party) | 2 years (browser cookie lifetime; GA event data is purged at 2 months) | Distinguish unique visitors for Google Analytics aggregation |
_ga_* | Analytics (first-party) | 2 years | GA4 session identifier (one per measurement ID) |
The hospital workspace may use a session cookie when authentication is enabled in a future release.
2. What we don’t do
We don’t currently sell or rent your data to advertisers or data brokers. We don’t serve programmatic display advertising on the consumer atlas. We don’t construct cross-site advertising profiles ourselves (data sent to Google for analytics is governed by Google’s terms — see §1). We don’t currently share data about you with hospitals or insurers. If we later offer analytics to hospitals, it would use only aggregated, de-identified data, such as county-level search counts — never information that identifies you. We do not ask for, or store in a form that identifies you, health information about you, and we discourage you from emailing health details to us.
3. Hospital workspace
The hospital workspace at /workspace is intended for authorised hospital employees. When authentication is enabled in a future release, the workspace will collect login information (email, a password hash, optional MFA seed) and a session cookie. Workspace privacy practices will be documented in this section once that feature ships.
4. Children’s privacy
The Site is intended for adults. We do not knowingly collect personal information from children under 13.
5. Your rights
Depending on where you live (for example, if you are a Colorado resident under the Colorado Privacy Act, or a California resident under the CCPA/CPRA), you may have rights to access, correct, or delete personal information we hold about you, and to opt out of certain processing. To exercise those rights, email clear-price-corrections@geninspired.com. If you are a Colorado resident, you also have the right to opt out of the sale of personal data and of targeted advertising; we honour a recognised universal opt-out mechanism, such as Global Privacy Control, automatically. If we deny a rights request, you may appeal by replying to the same address, and we will respond to your appeal within 45 days; if we deny the appeal, we will tell you how to contact the Colorado Attorney General. Because we collect very little personal data, in most cases the only information we hold that identifies you is what you sent us in an email, which we can delete on request.
6. Security
The Site is delivered as static HTML over HTTPS. We follow standard engineering practices for the workspace and any future authenticated features. No system is perfectly secure; if you believe you have found a security issue, please email clear-price-corrections@geninspired.com.
7. Changes to this Policy
We may update this Policy from time to time. Material changes will be reflected in the “Last updated” date above and, where appropriate, by a notice on the Site.
8. Contact
Questions about this Privacy Policy? Email us.