Effective date: [Month Day, Year]
Last updated: [Month Day, Year]
This Privacy Policy explains how [HomeCareIntent legal entity] ("HomeCareIntent," "we," "us") collects, uses, and shares information through homecareintent.com, the HomeCareIntent application, and related services (the "Services").
HomeCareIntent is an independent company. We are not affiliated with or endorsed by any government agency.
1. Who this policy covers
- Visitors to our website.
- Customers and users who create accounts.
- Prospects who request a demo or receive a sales preview.
- Individuals named in public business records that appear in our market data (see Section 5).
The Services are intended for businesses. They are not directed to children under 16, and we do not knowingly collect information from them.
2. Information we collect
2.1 Information you give us
- Account information: name, work email, company, password (stored only as a one-way hash), role.
- Demo and contact requests: name, work email, company, website, what you sell, markets of interest, and any note you add.
- Billing information: processed by our payment processor, Stripe. We receive limited details (such as card brand, last four digits, and billing address) but do not store full card numbers.
- Correction requests: the record you report, your suggested correction, contact details, and any evidence links.
- Communications you send us.
2.2 Information collected automatically
- Usage data: pages viewed, features used, signals opened, filters applied (we do not record the free text you type into filters in analytics), device and browser type, and approximate location derived from IP address.
- Attribution data: the referring site and campaign parameters (such as
utm_source) for your first and most recent visits, stored in first-party cookies and with your lead or account record. - Security logs: sign-in events, a hashed form of IP addresses, and user agent, used to protect accounts and the Services.
- Cookies: see Section 7.
2.3 Information from public and third-party sources
- Public records: state licensing and regulatory records and other official public sources about home care organizations.
- Business enrichment providers: business websites, company phone numbers, public business email addresses, and business roles of individuals at organizations. Each enriched field is labeled with its provider and retrieval date in our product.
We do not collect protected health information, patient or client information, or information about care recipients.
3. How we use information
- Provide, operate, secure, and improve the Services.
- Create and manage accounts, workspaces, and subscriptions.
- Respond to demo requests and communicate with prospects and customers about HomeCareIntent.
- Send transactional emails (verification, alerts you configure, billing notices) and, where permitted, product updates.
- Measure and improve our website and marketing (analytics and attribution).
- Detect, prevent, and respond to fraud, abuse, scraping, and security incidents.
- Comply with legal obligations and enforce our Terms and Data Terms.
We do not sell personal information of our website visitors or customers for money. We do not use our data to make decisions about individuals' eligibility for credit, insurance, employment, or housing.
4. How we share information
- Service providers who process data on our behalf under contract, such as hosting and database providers, Stripe (payments), Resend (email delivery), PostHog (product analytics), Sentry (error monitoring), and business enrichment providers. [Confirm final vendor list before publishing.]
- Customers, in the case of public business-record information described in Section 5, as part of the Services.
- Legal and safety: when required by law, subpoena, or to protect rights, safety, and the integrity of the Services.
- Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.
- With your direction or consent.
5. Individuals named in public business records
Our market data is about organizations. Some public records name individuals in a business capacity — for example, an agency administrator or licensee. We may display these names and business roles to paying customers for business-to-business purposes. We never display them on our public website pages.
If you are named in our data and believe the information is inaccurate, or you would like us to review its display, contact [privacy@homecareintent.com]. We will review requests in good faith. We may keep the underlying public source record in our historical archive for accuracy, auditing, and legal reasons, even when we stop displaying it.
6. Your choices and rights
- Account information: update it in Settings or contact us.
- Marketing emails: unsubscribe using the link in any marketing email. Transactional and alert emails you configure can be managed in the app.
- Analytics: we honor the Global Privacy Control (GPC) browser signal by not sending analytics events for that browser.
- Access, correction, deletion: depending on where you live, you may have rights to request access to, correction of, or deletion of your personal information, and to opt out of certain processing. Submit requests to [privacy@homecareintent.com]. We will verify your request and respond as required by applicable law. [Counsel: confirm applicability of state privacy laws (e.g., California CCPA/CPRA thresholds) and add required disclosures.]
7. Cookies and similar technologies
| Cookie | Purpose | Duration |
|---|---|---|
__Host-hci_session | Keeps you signed in (strictly necessary) | Up to 30 days |
hci_ft, hci_lt | Records first and most recent marketing source (first-party attribution) | 90 / 30 days |
| Analytics (PostHog), if enabled | Product and website analytics, served from our own domain | [Per provider configuration] |
We do not use third-party advertising cookies. [Update if this changes.]
8. Data retention
- Account and workspace data: for the life of the account, then up to 90 days after cancellation (to allow reactivation), then deleted or de-identified, except where retention is required for legal, tax, or security purposes.
- Demo request records: up to 24 months after last contact, unless you become a customer.
- Security and audit logs: up to 2 years.
- Public source records and snapshots: retained as part of our historical market archive.
9. Security
We use administrative, technical, and organizational measures designed to protect information, including encryption in transit, hashed passwords and session tokens, role-based access controls, and audit logging of administrative actions. No method of transmission or storage is completely secure.
10. International users
The Services are designed for U.S. businesses and are operated in the United States. If you access them from elsewhere, your information will be processed in the United States.
11. Changes
We may update this policy. We will post the updated version with a new "Last updated" date and, for material changes, notify account owners by email.
12. Contact
[HomeCareIntent legal entity]
[Street address]
[City, State ZIP]
[privacy@homecareintent.com]