Privacy policy

Last Modified: June 30, 2026

Montera, Inc., doing business as Forta (“Forta,” “we,” “us,” or “our”), operates fortahealth.com (the “Site”) and provides virtual and in-home Applied Behavior Analysis (“ABA”) therapy for children diagnosed with autism. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit the Site, contact us, apply for services, or otherwise interact with us.

Important — two different sets of rules apply:

  • Protected Health Information (PHI). Health information we create or receive while providing ABA therapy is “Protected Health Information” and is governed by the Health Insurance Portability and Accountability Act (“HIPAA”) and described in our separate Notice of Privacy Practices (“NPP”). Where this Privacy Policy and the NPP conflict with respect to PHI, the NPP controls.
  • Website and marketing data. Information collected through our Site, advertising, and general communications that is not PHI is governed by this Privacy Policy.

1. Information We Collect

Information you provide to us:

  • Contact and inquiry details (name, email, phone, ZIP code, state).
  • Application/intake information (child’s age, ASD diagnosis status, requested services, insurance details, preferred language, how you heard about us). When you submit intake or clinical information, that information may become PHI governed by our NPP.
  • Communications you send us (email, phone, web forms, webinar registrations).

Information collected automatically:

  • Device and usage data (IP address, browser type, time zone, pages viewed, referring URLs, search terms, interactions) collected through cookies, pixels, tags, and similar technologies.

Information from third parties:

  • Referring physicians/clinics, insurers and payors, and analytics/advertising partners.

2. How We Use Information

  • Respond to inquiries and process applications for services.
  • Verify insurance eligibility and coordinate care (PHI uses are described in the NPP).
  • Operate, secure, analyze, and improve the Site and our services.
  • Send administrative and, where permitted, marketing communications.
  • Comply with legal obligations and enforce our terms.

3. How We Share Information

  • Service providers / business associates who perform services for us (e.g., hosting, analytics, communications, scheduling) under appropriate contractual protections, including HIPAA Business Associate Agreements where PHI is involved.
  • Insurers/payors for eligibility, authorization, and billing.
  • Legal and safety: to comply with law, respond to lawful requests, and protect rights and safety.
  • Business transfers: in connection with a merger, financing, or acquisition.

We do not sell PHI. We do not sell personal information for money. Some sharing for online advertising may be considered a “sale” or “sharing” under certain state laws — see Section 7.

4. Cookies, Analytics & Advertising

We use cookies and similar technologies, including Google Analytics / Google Tag Manager, Meta (Facebook) tools, and click-fraud monitoring (ClickCease), to operate the Site, measure performance, and support advertising. Our cookie banner lets you accept or decline non-essential cookies. You can also control cookies through your browser and opt out of certain advertising via the NAI (optout.networkadvertising.org) and DAA (optout.aboutads.info), or directly with major platforms:

  • Google: google.com/settings/ads and tools.google.com/dlpage/gaoptout
  • Meta (Facebook): facebook.com/settings/?tab=ads
  • Microsoft/Bing: about.ads.microsoft.com/resources/policies/personalized-ads

5. Your Choices

  • Marketing opt-out via unsubscribe links or by contacting us.
  • Cookie controls as described above.
  • Account and communication preferences.

6. Data Security

We maintain administrative, technical, and physical safeguards designed to protect information. PHI is protected consistent with HIPAA and the HITECH Act. No method of transmission or storage is completely secure.

7. Your Privacy Rights (State Laws)

Depending on your state of residence (for example, California’s CCPA/CPRA), you may have rights to know/access, correct, delete, and port your personal information, and to opt out of the “sale”/“sharing” of personal information and of targeted advertising. To exercise these rights, contact legal@fortahealth.com or use our CCPA opt-out page. We will not discriminate against you for exercising your rights. PHI handled under HIPAA is generally exempt from these state laws.

8. Children’s Privacy

The Site is intended for parents, guardians, and adults. We do not knowingly collect personal information directly from children through the Site. We provide therapy to minors as patients; health information about those minors is handled under HIPAA and our NPP.

9. Retention & Storage

We retain information for as long as necessary to provide services and to comply with legal, tax, and recordkeeping obligations (including medical-record retention requirements), resolve disputes, and enforce agreements. Information is stored on secure servers in the United States.

10. Third-Party Links

The Site may link to third-party sites we do not control. Their privacy practices are governed by their own policies.

11. Do Not Track

Because there is no common industry standard for “Do Not Track” signals, we do not currently respond to them.

12. Changes

We may update this Privacy Policy. Material changes will be posted here with a new effective date.

13. Contact Us

Montera, Inc. DBA Forta — Attn: Privacy — 548 Market St, PMB 89605, San Francisco, CA 94104-5401. Email: legal@fortahealth.com | Phone: 415-322-8857.