Privacy Policy

From families (intake): your name, phone number, email address (optional), ZIP code, what help is needed, any notes you add, your life situation (optional), timing, payment path, and your contact consent.

From newsletter subscribers: your name (optional), email address, and situation (optional). You confirm with a double opt-in link before receiving anything, and every newsletter carries a one-click unsubscribe link.

From operators, agency users, and partners: your email address and your role. You sign in with a magic link — we never ask for or store a password.

Automatically: case status and history, audit logs of actions taken on a case, and a sign-in token stored in your browser's local storage so you stay signed in. We do not use advertising trackers.

To review your request, match it with affiliated partner agencies, book an assessment, show you your case status, communicate with you about your request, operate and secure the service, and meet legal obligations. We do not use your information to decide benefit eligibility or coverage — the program does that. If you subscribe to the newsletter, we use your email only to send it, and only after you confirm.

With agencies: only after you consent. Before consent, agencies see only de-identified information — what help is needed, ZIP, urgency, and payment path — never your name, phone, email, or address.

With service providers: only as needed to run the service (hosting, email delivery, SMS delivery), under contract, and only for the service's operation.

When required by law: if a court order or other legal process requires it.

We never sell your personal information. See our Do Not Sell page. We never sell family contact data, and we never share it for advertising.

Consent is recorded in an append-only ledger: every grant, decline, and related event is kept as a permanent record and is never overwritten. This is how we can show what was shared, when, and with whose permission.

We keep case and consent records as long as needed to operate the service and meet legal obligations. Consent and audit history is kept as a permanent record because it is the proof of what was shared and why.

We use reasonable technical and organizational measures to protect your information, including magic-link sign-in (no stored passwords) and access limited by role. No system is completely secure. If you believe your tracking link or sign-in was compromised, contact us right away.

You can ask what information we hold about you, ask us to correct it, or ask us to delete it, by contacting us at hello@caredoor.net. We will respond as required by applicable law. Illinois residents and California residents have additional rights under their state laws, including the right to know, delete, and correct personal information, and the right not to be discriminated against for exercising those rights. We do not sell personal information, so there is nothing to opt out of — see our Do Not Sell page.

The service is used by adults. If you are arranging care for a minor, you must be their parent or legal guardian. We do not knowingly collect information directly from children under 13.

We may update this policy. We will post the updated version on this page with a new “Last updated” date. Questions: contact us at hello@caredoor.net.