Privacy Policy
Last updated September 19, 2026
CareConnect HR ("CareConnect HR," "we," "us") provides compliance, training, and HR administration software for home health and I/DD agencies, available at careconnecthr.co, through app.careconnecthr.co, and through our mobile apps. This policy explains what information we collect, how we use it, and the choices available to you.
CareConnect HR is provided to agencies ("Agencies") as a business tool. If you are a caregiver or other employee using CareConnect HR, your Agency has set up your account and controls the underlying employment relationship; CareConnect HR processes your information as a service provider to your Agency.
Information we collect
Account information. Name, email address, and password (stored in encrypted/hashed form) for anyone who signs in — agency administrators, agency staff, and employees.
Agency information. For agency accounts: agency name, license number, address, phone number, and branding details, plus subscription and billing information. Payment card details are collected and processed directly by our payment processor, Stripe — we do not store full card numbers ourselves.
Employee and caregiver information. Entered by an Agency administrator or by the employee themselves, which may include: name, contact details, job title, department, and employment status.
Compliance and background check records. CareConnect HR helps Agencies track the completion status and dates of background screenings and registry checks that are legally required for their staff (for example federal exclusion list checks and state-specific registry or criminal background checks). CareConnect HR does not itself perform these screenings — Agencies record the results of checks they obtain through their own background check process, and CareConnect HR stores that record.
Documents and uploaded files. Licenses, certifications, identification documents, and other personnel files uploaded by an Agency or an employee.
Training records. Course assignments, completion status, and quiz answers/scores for training completed through the platform.
Signed forms and electronic signatures. CareConnect HR lets Agencies collect legally binding electronic signatures on HR documents (for example employment applications, handbook acknowledgments, and direct deposit authorization forms). Depending on the specific form an Agency uses, this can include sensitive information such as bank account and routing numbers. This information is entered directly by the employee completing the form and is visible only to that employee and their Agency's authorized administrators.
Usage data. Standard technical information such as browser type, device type, and access times, collected automatically when you use the platform.
How we use this information
- To operate the platform: authenticate users, display each Agency's and employee's own data, and enforce which Agency's data each account can see.
- To generate compliance scores, reports, alerts, and audit-ready documentation for Agencies.
- To power optional AI-assisted features (for example drafting a Plan of Correction or generating training content) — text you provide to these features is processed to generate the requested output.
- To process Agency subscription billing.
- To communicate with users about their account, and to provide support.
How we share information
We do not sell personal information, and we do not share it with third parties for their own advertising purposes. We share information with:
- Your Agency. If you're an employee, your Agency's authorized administrators can see the records described above, since maintaining those records for their staff is the core purpose of the platform.
- Service providers who host and run the platform on our behalf, under contractual confidentiality obligations: Supabase (database, authentication, and file storage), Cloudflare (web hosting and content delivery), and Stripe (subscription payment processing for Agencies).
- Legal and safety reasons, where we believe in good faith that disclosure is required by law, regulation, or legal process.
Data security
Data is encrypted in transit. Our database enforces row-level access rules so that an Agency's data is only reachable by that Agency's own authorized accounts, and an employee's data is only reachable by that employee and their Agency's authorized administrators. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
Data retention
We retain information for as long as an Agency's account is active, and afterward for as long as needed for legitimate business, recordkeeping, or legal purposes. Employment compliance records are often subject to recordkeeping requirements under employment or healthcare regulations, so records for a former employee are typically retained (marked as terminated) rather than deleted, to preserve the Agency's audit history.
Your choices
If you'd like to request access to, correction of, or deletion of your information, contact us at [email protected]. If you are an employee, some requests may need to be handled by your Agency, since they administer your underlying account.
Children's privacy
CareConnect HR is a workplace tool intended for use by employed adults and the agencies that employ them. It is not directed at children, and we do not knowingly collect information from children under 13.
Changes to this policy
We may update this policy from time to time. If we make material changes, we'll update the "Last updated" date above.
Contact us
Questions about this policy can be sent to [email protected].