Privacy Notice for Provider’s and Client’s Information
SAGE AI Tool
Effective October 16, 2026 · Last updated October 16, 2026
SAGE is an AI-powered wellness support platform offered by For Healthy Cells and Wellspring Restored (collectively, the “Company,” “we,” “us,” or “our”).
This Privacy Notice explains how we collect, use, store, disclose, and protect information in connection with SAGE, including information relating to providers who use the platform and clients whose information providers submit through SAGE.
This Privacy Notice supplements the SAGE Provider Terms and Conditions of Use. It should be read together with those Terms and any applicable data-processing agreement, service agreement, or other written privacy commitments.
By using SAGE, providers acknowledge this Privacy Notice. Where consent is legally required for a particular collection or use of personal information, we will obtain that consent separately.
1. Information We Collect
Depending on how SAGE is used, we may collect the following categories of information:
A. Provider Information
- Name, business name, professional contact information, and account registration details.
- Professional credentials or qualifications when required for eligibility verification.
- Account login information and authentication records.
- Subscription, billing, and transaction information, where applicable.
- Communications with the Company and requests for support.
B. Client Information Submitted Through SAGE
Providers may submit client information to support wellness education, information organization, and AI-assisted wellness insights. This information may include:
- Client-provided health and wellness information.
- Nutrition, lifestyle, wellness goals, and related questionnaire responses.
- Laboratory results, wellness assessments, and other health-related reports.
- Information concerning nutrients, food sensitivities, environmental exposures, or other wellness-related factors.
- Relevant client history or other information voluntarily supplied by the provider.
Providers should submit only information that is reasonably necessary for the intended purpose and that they are legally authorized to share.
C. Technical and Usage Information
We and our authorized service providers may collect technical information associated with platform use, such as access times, device and browser information, diagnostic logs, usage activity, and security events, to the extent collected by the platform.
2. How We Use Information
We may use information to:
- Create and administer provider accounts.
- Operate, maintain, and provide SAGE features.
- Process information submitted by providers and generate AI-assisted outputs.
- Support wellness education, data organization, and provider-client communications.
- Provide technical support and respond to inquiries.
- Maintain platform security, detect misuse, and investigate potential security incidents.
- Monitor system performance, troubleshoot errors, and improve platform functionality.
- Administer subscriptions, payments, and contractual relationships.
- Comply with legal obligations and enforce our agreements.
- Carry out other purposes disclosed to the provider and authorized by applicable law.
We will not use personal information for a materially different purpose unless permitted by law and, where required, after providing notice or obtaining consent.
3. Artificial Intelligence and Automated Processing
SAGE uses artificial intelligence to process submitted information and generate summaries, educational content, suggestions, and other outputs.
Information submitted to SAGE may be transmitted to authorized AI model providers, hosting providers, or other technology vendors as necessary to operate the platform.
AI-generated outputs may contain errors, omissions, unsupported conclusions, or other limitations. They should be reviewed by the provider before being relied upon or shared with a client.
AI model training and improvement: The Company’s practices concerning the use of provider or client information to train, fine-tune, evaluate, or improve AI models will be disclosed here once those practices have been confirmed. Any such use must be consistent with applicable law, contractual commitments, and required permissions or consents.
Unless expressly disclosed and appropriately authorized, providers should not assume that information submitted to SAGE will be used for AI model training, nor should they assume that it will never be used for that purpose. Providers should follow the platform’s applicable data-use instructions.
4. How We Share Information
We may disclose information in the following circumstances:
Authorized service providers. We may share information with vendors that provide hosting, AI processing, data storage, security, technical support, payment processing, or other services necessary to operate SAGE.
Provider-directed use. Information may be processed or made available as necessary to provide the functionality requested by the provider, subject to applicable permissions and access controls.
Legal obligations and protection. We may disclose information when reasonably necessary to comply with applicable law, respond to lawful legal process, protect the rights or safety of individuals, investigate suspected fraud or unlawful activity, or secure the platform.
Business transactions. Information may be disclosed as part of a merger, acquisition, financing, restructuring, or sale of relevant business assets, subject to applicable legal requirements and appropriate safeguards.
Other authorized disclosures. We may disclose information for other purposes with appropriate authorization or where otherwise permitted by law.
We do not authorize service providers to use client information for unrelated purposes merely because they receive it to provide services to SAGE. Applicable contracts and vendor arrangements should establish appropriate restrictions and safeguards.
5. Confidentiality and Information Security
We use, or will implement as appropriate to the platform and the information involved, administrative, technical, and organizational safeguards designed to protect information against unauthorized access, use, alteration, disclosure, or loss.
Depending on the system and applicable requirements, safeguards may include access controls, authentication measures, secure data transmission, vendor oversight, and security monitoring.
No method of electronic transmission or storage can be guaranteed to be completely secure though specific actions have been undertaken to maintain confidentiality of transmissions.
Providers are responsible for protecting their account credentials, restricting access to authorized personnel, and following the security requirements in the Provider Terms and Conditions. Providers should promptly report suspected unauthorized access or disclosure involving information submitted through SAGE.
6. Client Consent and Provider Responsibilities
Providers are responsible for determining whether they have the legal authority, client consent, and other permissions necessary to submit client information to SAGE.
Providers must:
- Obtain any consent or authorization required by applicable law before submitting client information.
- Explain relevant uses of client information when required.
- Limit submitted information to what is reasonably necessary.
- Use de-identified or minimized information whenever reasonably practicable.
- Comply with applicable professional confidentiality obligations and privacy requirements.
- Maintain records of required consents and authorizations.
- Respond appropriately to client requests concerning information maintained in the provider’s own records.
The Company may rely on the provider’s representations concerning authorization to submit information, but this does not eliminate any independent legal obligations the Company may have.
7. Privacy Laws
This Privacy Notice represents that SAGE is not HIPAA compliant or that all information submitted to SAGE is not protected health information under HIPAA.
Other federal and state privacy, consumer protection, data security, and health-information laws may also apply, depending on the circumstances.
8. Data Retention and Deletion
We retain information for the period reasonably necessary to provide SAGE, fulfill the purposes described in this Notice, meet contractual obligations, maintain security, resolve disputes, and comply with applicable law.
Actual retention periods may vary depending on the type of information, the purpose of processing, and applicable legal or contractual requirements. Sage will retain user files of active providers for a period of 2 years.
When information is no longer required, we will delete, de-identify, or otherwise dispose of it as appropriate and as permitted by applicable law and contractual obligations. Deletion from active systems may not immediately remove information from backups or records that must be retained.
Upon termination of a provider’s access, user records will be purged from the system in 90 days.
9. Individual Privacy Rights and Requests
Depending on applicable law, individuals may have rights to request access to, correction of, deletion of, or information about the processing of their personal information. Certain rights may be subject to exceptions or limitations.
Providers seeking information about their SAGE accounts may contact the Company using the contact information below.
Clients whose information has been submitted by a provider should ordinarily direct requests concerning the provider’s records to that provider. Where the Company independently maintains or controls the relevant information, requests may also be directed to the Company.
We will review and respond to requests in accordance with applicable law and our contractual obligations.
10. Cookies and Similar Technologies
If SAGE uses cookies, analytics tools, or similar technologies, those technologies may collect information about platform access, usage, preferences, and performance.
11. Third-Party Services and Integrations
SAGE may rely on third-party AI systems, hosting platforms, software, integrations, or other services. Information processed through those services may be subject to additional contractual terms and privacy practices.
The Company will identify relevant third-party processing arrangements as appropriate and will take reasonable steps to ensure that information is handled consistently with applicable contractual and legal requirements.
Providers should not assume that a third-party service is suitable for sensitive client information unless its use has been appropriately reviewed and authorized.
12. Changes to This Privacy Notice
We may update this Privacy Notice to reflect changes in SAGE, our data practices, applicable law, or our business operations.
Material changes will be communicated through the platform, provider communications, or another reasonable method. Where required by law or contract, we will obtain consent or renewed authorization before implementing a new use of personal information.
The updated Notice will identify its effective date. Continued use of SAGE will be treated as acceptance of changes only to the extent permitted by applicable law.
13. Contact Information
Questions, privacy requests, or concerns about this Privacy Notice may be directed to:
For Healthy Cells and Wellspring Restored
Email: sage@forhealthycells.com
Mailing Address: 148 Easton Place, Burr Ridge, IL 60527