Privacy Policy

1. Who we are

CarebudgetAI is operated by Balance & Wellness L.L.C., a Minnesota limited liability company based in Burnsville, MN ("we," "us," "our"). This Privacy Policy describes how we collect, use, share, and protect your personal information when you use CarebudgetAI.

2. Information we collect

We collect the following categories of information:

• •Assessment responses: The answers you provide about the person who needs care, including age, state, Medicaid and Medicare status, living situation, level of care needed, caregiver relationship, and similar details.
• •Contact information: Your email address, provided when you purchase a report or sign in to the portal.
• •Payment information: Stripe processes your payment. We receive confirmation of payment status, transaction ID, and amount. We do not receive or store your full credit card number.
• •Portal and account data: Authentication tokens, session data, and magic-link sign-in records managed by Supabase Auth.
• •Technical and usage data: IP address, browser type, device type, pages visited, referral source (if you arrived via a referral link), and similar data collected automatically through server logs and analytics tools.
• •Support communications: Any information you provide when you email support@carebudget.org.

3. How we use your information

We use your information for the following purposes:

• •To run the eligibility comparison and generate your report based on your assessment responses.
• •To process your payment through Stripe.
• •To deliver your report and send magic-link sign-in emails for portal access.
• •To send transactional emails, including report-ready notifications.
• •To send reminder emails if you start but do not complete an assessment or purchase (see Section 5 for details).
• •To attribute referrals when you arrive via a referral link.
• •To monitor site performance, diagnose errors, and improve the service.
• •To comply with legal obligations.

4. Service providers we share data with

We share personal information with the following categories of service providers that process data on our behalf. We do not sell or rent your personal information to anyone.

• •Stripe — payment processing. Stripe receives your email, payment details, and transaction metadata. Stripe's privacy policy governs their handling of payment data.
• •Supabase — database, authentication, and backend infrastructure. Stores your assessment data, report data, account records, and authentication tokens.
• •Vercel — hosting and deployment. Serves the website and processes server-side requests. Vercel Analytics collects anonymized usage data.
• •Resend — transactional email delivery. Receives your email address to send report-ready notifications, reminder emails, and other transactional messages.
• •Anthropic — AI processing. Your assessment responses and matched program data are sent to Anthropic's Claude API to generate the narrative portions of your report. Anthropic's API usage policy governs their handling of this data.
• •Voyage AI — embedding and search. Program data (not your personal information) is sent to Voyage AI to generate vector embeddings used in report generation.
• •Sentry — error monitoring. May receive technical data (IP address, browser, error context) when errors occur.

5. Abandoned assessment emails

If you start an assessment and provide your email address but do not complete a purchase, we may send you up to three reminder emails over approximately one week encouraging you to return and complete the process. These emails contain your matched program count and a link to resume. You can opt out of these reminder emails at any time by emailing support@carebudget.org with the subject line "Unsubscribe." We will stop sending reminder emails within 5 business days of receiving your request.

6. Cookies and tracking technologies

CarebudgetAI uses the following tracking mechanisms:

• •Supabase Auth cookies: Session cookies used to authenticate your portal sign-in. These are essential for the service to function.
• •localStorage: We store a referral code in your browser's localStorage if you arrive via a referral link. This is used to attribute your purchase to the referrer.
• •Vercel Analytics: Collects anonymized, aggregated page-view and performance data. No personally identifiable tracking cookies are set by Vercel Analytics.
• •We do not use third-party advertising cookies or retargeting pixels.

7. Data retention

We retain your data as follows:

• •Purchased reports and assessment data: Retained indefinitely so you can access your report through the portal at any time.
• •Unpurchased assessment data: Retained for up to 90 days after the last reminder email, then deleted.
• •Abandoned assessment records: Email address and matched program count are retained for up to 90 days to support the reminder email sequence, then deleted.
• •Payment records: Retained as required by applicable tax and financial record-keeping laws (typically 7 years).
• •Server logs and technical data: Retained for up to 90 days for debugging and security purposes.
• •Support communications: Retained for as long as needed to resolve your inquiry and for our records.

8. Your rights and choices

Depending on your location, you may have the following rights regarding your personal information:

• •Access: You can request a copy of the personal information we hold about you.
• •Deletion: You can request that we delete your personal information. If you have a purchased report, deletion means you will lose access to that report permanently.
• •Correction: You can request that we correct inaccurate personal information.
• •Opt out of reminder emails: Email support@carebudget.org with the subject line "Unsubscribe" to stop abandoned-assessment reminder emails.
• •To exercise any of these rights, email support@carebudget.org. We will respond within 30 days. We may ask you to verify your identity before processing your request.

9. State privacy rights

If you are a resident of California, Minnesota, or another state with a comprehensive consumer privacy law, you may have additional rights, including the right to know what personal information we collect and share, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise any state-specific privacy right, email support@carebudget.org with your request and state of residence. We will respond within the timeframe required by applicable law.

10. Children's privacy

CarebudgetAI is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact support@carebudget.org and we will delete it promptly.

11. Data security

We use reasonable technical and organizational safeguards to protect your personal information, including encrypted connections (HTTPS), access controls, and secure infrastructure provided by our service providers. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy from time to time by posting a revised version with a new "Last updated" date. If we make material changes that affect how we handle your personal information, we will notify you by email (if we have your email address) or by placing a notice on the site before the changes take effect. Your continued use of CarebudgetAI after changes are posted constitutes acceptance of the updated policy.

13. Contact us

Questions about this Privacy Policy, data deletion requests, or reminder-email preferences can be sent to support@carebudget.org. Balance & Wellness L.L.C., Burnsville, MN.