Limbus Health (“Limbus”, “we”) is a clinician-led effort founded by Dr. Marie Claire Bourque, MD, FRCPC. This policy explains how we handle the limited information collected through this website’s Assess waitlist, updates list, and investor-access request forms.
What we collect
- Your email address, when you join the Assess waitlist or subscribe to Limbus updates.
- Your request or consent and its timestamp, recorded when you check the relevant confirmation box.
- Whether you are joining as a patient, physician, or clinical organization, plus an optional clinic or organization name, when you request to join the Assess waitlist. The form does not ask for symptoms, diagnoses, referral details, patient names, or any other health information.
- The Limbus page where you signed up, so we can distinguish the context of an Assess waitlist request or an investor-page updates subscription without collecting more information.
- A keyed one-way hash of your IP address, used only to prevent spam and abuse. Our application writes only this hash, not your raw IP address, to the contact database. Our hosting provider may process ordinary connection data, including an IP address, to deliver and secure the website.
The Assess waitlist and Limbus updates are separate records. Joining one does not add you to the other. Neither is a clinical service, referral route, or request for care. We do not collect health information or clinical data through either form. Signing up from the investor page does not merge your updates subscription with a deck request. (The investor deck request form collects optional additional information; see the Investor deck requests section below.)
How we use it
For the Assess waitlist, we use your information to confirm that you requested to join, understand whether you joined as a patient, physician, or clinical organization, operate the list, and contact confirmed members about potential patient access, clinician pilots, or other early-access opportunities. Joining does not promise access, priority, or a launch date.
For Limbus updates, we use your email only to confirm your signup (double opt-in) and send the product, company, and access updates you’ve asked for. After you confirm, we send you a single welcome email describing what you’ve joined; beyond that, we email only occasionally, when there is something real to share. We do not sell or rent your email, share it for third-party marketing, or add it to an advertising list. Our infrastructure and email providers process it only to operate this service.
We record whether an updates message was accepted, delivered, delayed, bounced, failed, suppressed, or reported as spam. A bounce, failure, suppression, or complaint stops future updates to that address automatically. We retain that limited status with the subscription record so we do not keep sending to an address that should be suppressed.
Email messages identify the sender and include a functional removal or unsubscribe link. The link opens a confirmation page before deletion so automated email scanners cannot remove you accidentally. Broader Limbus updates require their own subscription; a waitlist request is not treated as consent to receive general company marketing.
Double opt-in
When you submit either form, we send a confirmation link to your email. You are not added to the confirmed Assess waitlist or active updates list until you click it. Unconfirmed requests expire and are deleted after 24 hours.
Where your data is stored
The main contact record is stored in a Limbus-controlled account on Neon, our managed Postgres provider. The website runs on Vercel, and transactional messages are sent through Resend. These service providers process the limited data needed to host the site, protect it, and send the requested email. Resend processes recipient addresses, message content, and delivery metadata; its current standard email-data retention is 30 days, and its account data is stored in the United States. Data may therefore be processed outside Canada, where it is subject to local law. We do not put the updates list or investor list into Resend Contacts unless we deliberately adopt its separate marketing-broadcast product in the future.
Analytics
We use aggregate website analytics to understand page traffic. We do not configure advertising pixels or cross-site tracking, and we do not sell website usage data. Form values are not placed in analytics URLs.
Retention
We keep a confirmed Assess waitlist record until you withdraw it or the waitlist is no longer needed. We keep an updates email until you ask us to remove it or the updates list is no longer needed. You can have either record deleted at any time.
Your rights & how to be deleted
You may request access to, correction of, or deletion of the personal information we hold about you. Use the removal link in the relevant waitlist or updates email to delete that record immediately. Because the lists are separate, removing one does not silently remove or retain the other. You can also:
- Email [email protected] and specify which record you want removed. We’ll delete it within 10 business days.
Investor deck requests
If you request our investor deck via the form on /investors, we collect and use the following information. This data is stored separately from the updates list and is never merged with it.
- Your email address (required), to process the access request, provide a private deck link if access is available, and, if relevant, for the founder to follow up about investment.
- Name, company or firm, and how you heard about Limbus (all optional, only if you provide them). This information is stored in the private request record and included in an internal notification to the founder; it is never included in the deck email sent to you.
- Your consent and its timestamp, recorded when you check the consent box. Purpose is specific: sending the deck and following up about investment only.
- A keyed one-way hash of your IP address, used only to prevent spam and abuse. Our application writes only this hash, not your raw IP address, to the contact database. Our hosting provider may still process ordinary connection data to deliver and secure the site.
Why: to process the access request, provide a private deck link when access is available, and let the founder follow up about investment if relevant. This information is never used for general marketing or merged with our updates list.
Retention: an automated daily process deletes deck request records once they are 2 years old. We delete them sooner when you make a valid deletion request.
How to delete your deck request data:
- Click the "Remove my data" link in any deck-related email we've sent you (self-serve, immediate), or
- Email [email protected] and we'll delete it within 10 business days.
Deck request data is stored separately from our updates list and is never merged with it.
Regulatory status
LimbusHealth Assess is software as a medical device in development for adult ADHD assessment. Its Canadian classification and authorization pathway remains unresolved, and it is not authorized for clinical use (as of August 2026). This website does not provide medical advice or diagnosis.
Contact
Questions about this policy or your data? Email [email protected].