Privacy Policy

Last Updated: September 27, 2026

STREAM ABA LLC ("Stream ABA," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at StreamABA.com (the "Service").

Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly to us, including:

1.2 Information Collected Automatically

When you access or use the Service, we automatically collect:

1.3 Cookies, Analytics, and Advertising Technologies

We use cookies and similar tracking technologies on our marketing website to analyze traffic, improve our services, and deliver targeted advertising. Note: These tracking technologies are used only on our public marketing pages, not within the authenticated application where Protected Health Information is stored.

Types of Cookies We Use

Analytics Providers

We use the following analytics services:

Advertising and Retargeting

We work with advertising partners to show you relevant ads on other websites and platforms. These partners may collect information about your visits to our website and use it to deliver targeted advertisements. This is sometimes called "retargeting" or "remarketing."

Our advertising partners include:

These advertising technologies may collect information such as:

1.4 Information We Receive from Meta (Facebook and Instagram)

A practice that uses Stream ABA can connect its own Facebook Page and linked Instagram professional account through Facebook Login for Business. When it does, we receive the following from Meta on the practice's behalf:

We use this information only so the connecting practice can reply to and follow up with the person who contacted it. We do not sell it, we do not use it for advertising, and we do not use it to train artificial intelligence models. We do not share it with third parties except the service providers that host our platform.

If a person unsends an Instagram or Messenger message, we erase its text and attachments from the practice's inbox. Practice staff can also delete a message from their inbox.

To have us delete the information we received about you from Meta, email us at [email protected], or ask the practice you contacted to delete your messages. If you connected Stream ABA to your own Facebook account, removing Stream ABA in your Facebook settings (Business Integrations, or Apps and Websites) also sends us a deletion request automatically.

Meta does not sign a Business Associate Agreement. Please do not send diagnoses, treatment details, insurance member IDs, or other health information over Facebook or Instagram.

2. Protected Health Information (PHI)

Stream ABA is designed to help ABA therapy practices manage client information, which may include Protected Health Information (PHI) as defined under the Health Insurance Portability and Accountability Act (HIPAA).

2.1 Our Role

When you use our Service to store or process PHI, Stream ABA acts as a Business Associate under HIPAA. Our obligations regarding PHI are governed by:

2.2 Your Responsibilities

As a Covered Entity or Business Associate, you are responsible for:

3. How We Use Your Information

We use the information we collect to:

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party vendors who perform services on our behalf, such as:

These providers are contractually obligated to protect your information and use it only for the services they provide to us.

4.2 Advertising Partners

We share certain information with advertising partners to deliver targeted advertisements and measure the effectiveness of our marketing campaigns. This includes:

Our advertising partners include Google, Meta (Facebook/Instagram), LinkedIn, and Reddit. Each partner has its own privacy policy governing how they use this data.

Important: We do not share Protected Health Information (PHI) or data from the authenticated application with advertising partners. Advertising technologies operate only on our public marketing pages.

4.3 Legal Requirements

We may disclose information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business Transfers

If Stream ABA is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Security

We implement robust security measures to protect your information, including:

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. We also retain information as necessary to:

When you terminate your account, we will delete or anonymize your information within 90 days, except as required by law or as outlined in our data retention policies.

7. Your Rights and Choices

7.1 Account Information

You may access, update, or delete your account information at any time through your account settings or by contacting us.

7.2 Communications

You may opt out of promotional communications by following the unsubscribe instructions in those messages. You cannot opt out of service-related communications.

7.3 Cookies and Tracking

You have several options to control cookies and tracking technologies:

Browser Controls

Most browsers allow you to control cookies through their settings. You can typically find these in your browser's "Settings," "Preferences," or "Privacy" menu. Note that disabling cookies may affect the functionality of the Service.

Platform-Specific Opt-Outs

You can opt out of personalized advertising from our advertising partners:

Industry Opt-Out Tools

You can also use these industry-wide opt-out tools:

Please note that opting out does not prevent you from seeing ads; you will still see ads, but they may be less relevant to you.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

8.1 Right to Know

You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collecting it, and the categories of third parties with whom we share it.

8.2 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions.

8.3 Right to Opt-Out of Sale/Sharing

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CPRA), you have the right to opt out of the "sale" or "sharing" of your personal information.

Do We Sell Personal Information? We do not sell personal information in the traditional sense. However, our use of advertising cookies and pixels to deliver targeted advertising may be considered "sharing" of personal information under California law.

How to Opt Out: You can opt out of targeted advertising by:

8.4 Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

8.5 Exercising Your Rights

To exercise your California privacy rights, contact us at [email protected]. We will verify your identity before processing your request.

9. Children's Privacy

The Service is designed for use by healthcare professionals and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Note: While client records may contain information about minors receiving ABA therapy, this information is entered and managed by authorized healthcare professionals, not by the minors themselves.

10. International Users

Stream ABA is based in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

STREAM ABA LLC

Email: [email protected]

Website: streamaba.com

For HIPAA-related inquiries, please reference our HIPAA Notice of Privacy Practices.