PRIVACY POLICY

1. INFORMATION WE COLLECT

We collect personal information that you voluntarily provide to us when you register on the App, express an interest in obtaining information about us or our products and services, or otherwise when you contact us.

A. Personal Information Provided by You

The personal information that we collect depends on the context of your interactions with us and the App. The personal information we collect may include the following:

• Names: First and last name.
• Contact Data: Email address, phone number, and postal address (including State, Province, ZIP/Postal code, City).
• Social Media Login Data: We may provide you with the option to register with us using your existing social media account details, like your Facebook or Twitter account.
• Payment Data: We may collect data necessary to process your payment if you make purchases, such as your payment instrument number (such as a credit card number). All payment data is stored by Stripe. We do not store your full card details on our servers.

B. Information Automatically Collected

We automatically collect certain information when you visit, use, or navigate the App. This information does not reveal your specific identity (like your name or contact information) but may include:

• Device Data: We may request access or permission to certain features from your mobile device, including your mobile device's camera (pictures). If you wish to change our access or permissions, you may do so in your device's settings.
• Log and Usage Data: IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and information about how and when you use our App.

C. Information from Public Sources (Public Provider Data)

To provide a comprehensive directory of care options, we may collect, index, and display information about senior care providers, facilities, and healthcare professionals from publicly available government sources. These sources include, but are not limited to, state licensing agencies, the Centers for Medicare & Medicaid Services (CMS), and other regulatory bodies. This information ("Public Provider Data") typically includes business names, business addresses, license numbers/status, and business phone numbers.

2. HOW WE USE YOUR INFORMATION

We process your information for purposes based on legitimate business interests, the fulfillment of our contract with you, compliance with our legal obligations, and/or your consent. We use the information we collect or receive:

• To facilitate account creation and logon process.
• To send you marketing and promotional communications. We use third-party platforms (Mailchimp, Constant Contact, GetResponse) to send emails. You can opt-out of our marketing emails at any time.
• To fulfill and manage your orders. We use your information to fulfill and manage your subscription and payments via Stripe.
• To deliver targeted advertising to you. We use remarketing services to advertise on third-party websites to you after you visited our App.
• To protect our Services. We use Invisible reCAPTCHA to protect against spam and abuse.
• To improve user experience. We may use session replay tools to understand user behavior and improve the App's functionality.

3. SHARING YOUR INFORMATION

We may process or share your data that we hold based on the following legal basis:

• Vendors, Consultants, and Other Third-Party Service Providers: We may share your data with third-party vendors who perform services for us or on our behalf. The specific third parties we use include:
• Payment Processing: Stripe
• Cloud Computing & Backend: Firebase
• Email Marketing: Mailchimp, Constant Contact, GetResponse
• Customer Support: FreshDesk
• Functionality: Google Places API
• Web Analytics: Google Analytics, Clicky, Mixpanel
• Retargeting/Remarketing: Google Ads (AdWords), Facebook (Meta), Twitter (X), AdRoll, LinkedIn.

4. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies (like web beacons and pixels) to access or store information.

Analytics & Session Replay:

We use Google Analytics, Firebase, Clicky, and Mixpanel to analyze the use of our website. We may also use session replay software (such as Microsoft Clarity or Hotjar) to record user interactions (clicks, scrolls, mouse movements) on our App. These tools help us identify usability issues and improve the user experience. These recordings do not capture sensitive personal input such as credit card numbers or passwords.

Remarketing:

We use remarketing services to advertise on third-party websites to you after you visited our Service. We and our third-party vendors use cookies to inform, optimize, and serve ads based on your past visits to our Service.

• Google Ads (AdWords): You can opt-out of Google Analytics for Display Advertising and customize the Google Display Network ads by visiting the Google Ads Settings page.
• Facebook, Twitter, LinkedIn, AdRoll: You generally can opt-out of receiving personalized ads from third-party advertisers and ad networks who are members of the Network Advertising Initiative (NAI) or the Digital Advertising Alliance (DAA).

5. PROVIDER LISTINGS AND DISCLAIMERS

No Endorsement:

The inclusion of any provider, facility, or service on FindGreatCare does not imply endorsement or recommendation by us. While we may aggregate data from public licensing records, we cannot guarantee the current quality, safety, or compliance of any provider. Users are responsible for conducting their own due diligence before selecting a care provider.

No Referral Fees:

Unless expressly marked as a "Sponsored" or "Premium" listing, the order in which providers appear in our directory is determined by location, relevance, and availability, not by financial payments. We do not accept referral fees for connecting users with care providers, nor do we direct users to specific providers based on undisclosed financial incentives.

6. INTERNATIONAL TRANSFERS

Our servers are located in the United States. If you are accessing our App from outside the United States, please be aware that your information may be transferred to, stored, and processed by us in our facilities and by those third parties with whom we may share your personal information.

7. GDPR RIGHTS (For EU/EEA Users)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights, including the right to access, correct, update, or delete your personal data.

Exceptions to Deletion Requests (Public Data):

Please note that we may not accommodate a request to delete information if the data serves a public interest or is part of a public registry of licensed healthcare providers. We reserve the right to maintain basic directory information (Name, Business Address, License Number) for licensed businesses and providers to ensure our directory remains comprehensive for the public good.

8. CALIFORNIA PRIVACY RIGHTS (CCPA & CPRA)

This section applies only to California residents. Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), you have specific rights regarding your personal information.

Your Rights:

• Right to Know: You may request that we disclose to you what personal information we have collected, used, shared, or sold about you.
• Right to Delete: You may request that we delete personal information we collected from you. Note: This right is subject to exceptions, including for data that is part of federal or state public records (Public Provider Data).
• Right to Opt-Out of Sale or Sharing: We do not "sell" personal information for money. However, we use third-party cookies for remarketing, which may be considered "sharing" for cross-context behavioral advertising. You have the right to opt-out of this sharing.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise any of these rights, you can contact us at support@findgreatcare.com.

9. CALIFORNIA ONLINE PRIVACY PROTECTION ACT (CalOPPA)

Do Not Track Policy: We do not currently respond to Do Not Track ("DNT") browser signals or mechanisms. Because there is not yet a common understanding of how to interpret the DNT signal, we do not currently alter our data collection and usage practices when we detect a DNT signal on your browser.

10. DATA RETENTION

We will only retain your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

11. SECURITY OF YOUR INFORMATION

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

12. CONTACT US

If you have questions or comments about this policy, you may email us at support@findgreatcare.com.