This Privacy Policy describes the collection, use, disclosure, retention, and protection of personal information in connection with the Careverse™ website, communications, and services that link to this Policy (collectively, the “Services”). Careverse™ is a brand of a public benefit corporation. The Services are operated by Care Access Technologies LLC, a Delaware limited liability company (“we,” “us,” or “our”). References to our public benefit mission do not change the identity or responsibilities of the platform operator. Our privacy contact details appear in Section 18.
Where we determine the purposes and means of processing personal data, we act as a controller or equivalent responsible organization under applicable law. Where we process information solely on a healthcare organization’s or other business customer’s instructions, we act in the capacity established by the applicable services agreement, data processing agreement, or business associate agreement. The customer’s privacy notice may govern that processing, and requests may need to be directed to that customer.
This Policy is a transparency notice. Visiting the website, accepting general terms, or submitting a request does not, by itself, constitute consent to every processing activity described below, a HIPAA authorization, or permission for unrelated advertising or model training. Supplemental notices and legally required consents apply to particular services. Mandatory statutory protections prevail over inconsistent language in this Policy.
When you request business-pass information, we use the company and business contact details, workforce size, locations, requested benefits and intended start date that you provide to respond, assess the requested setup and manage follow-up in HubSpot. Please do not include diagnoses, clinical documents, identity documents or payment credentials in a general business inquiry.
Company ownership of seats does not itself authorize access to an employee’s private health information or care conversations. Employee enrollment, permissions and any employer reporting remain subject to the agreed service scope and applicable privacy requirements.
The categories collected depend on the Services you use and information you elect or authorize to provide. We may receive information directly from you; from a person lawfully acting on your behalf; from providers, insurers, pharmacies, or other organizations you authorize; from business customers for whom we perform services; and automatically from your interaction with the Services.
Contact and account information may include names, email addresses, telephone numbers, account identifiers, language preferences, approximate location, and communications preferences. Care-related information may include the nature of a care inquiry, provider or service preferences, appointment requests, information about a dependent, and health, insurance, or prescription information submitted for the requested service. Do not submit health records or sensitive documents through a general marketing inquiry form.
Communications and AI interactions may include messages, prompts, documents, feedback, generated responses, and associated interaction records. Voice features, if used, may involve audio and transcripts; any recording or additional use requiring notice or consent must be addressed before that processing. An ordinary voice interaction does not authorize creation or use of a biometric identifier.
Commercial information may include membership selections, purchases, billing details, transaction references, and payment status where applicable. Enter payment credentials only into the designated payment interface. Professional and business information may include organization details, specialties, credentials, contact details, and information submitted for a provider or partner profile.
Technical and usage information may include IP address, browser and device characteristics, referring pages, approximate location derived from an IP address, language, site activity, and cookie or similar identifiers. Collection of precise location, biometric identifiers, or other specially regulated data requires the notices, permissions, and safeguards applicable to that activity; this Policy is not a blanket authorization for such collection.
Where generated by the applicable service, authorization and safety records may include the action requested, permissions granted or withdrawn, required confirmations, tool-execution status, handoff acknowledgments, relevant system versions, and incident or review records. Such records may contain personal or health information and remain subject to purpose limitation, access restrictions, retention limits, and any applicable health-data obligations.
Login provider. Careverse® uses Clerk for account authentication. Depending on the sign-in service, it may process account identifiers, name, email, organization membership, permissions, authentication and session records, and technical security information. If the sign-in interface offers another provider, that provider’s notice also applies. Use official sign-in screens and do not share passwords or verification codes with Careverse Lidia™. Authentication information is distinct from the health information you provide for a care request.
Payment providers. Careverse™ uses Square, Stripe and Authorize.net for payment processing. The provider involved depends on the payment flow used. Enter payment credentials only through the designated payment interface, and do not include them in conversations with Careverse Lidia™.
Enter payment credentials only in the designated payment provider’s checkout. Do not send full card numbers, card security codes, passwords or bank credentials through Careverse™ messages, AI conversations, inquiry forms or support emails.
Transaction administration may involve order identifiers, provider-issued payment references, amounts, currencies, payment status and limited billing information. The payment provider processes the information entered in its interface under its applicable privacy notice.
Please exclude diagnoses, medical documents and care conversations from payment instructions and refund requests. An order number and contact information ordinarily allow us to identify the transaction without unnecessary health information.
Removing a saved payment method or closing an account does not necessarily delete transaction records required for accounting, fraud prevention, dispute resolution or another lawful purpose. Section 11 explains retention and deletion; you may request information about records associated with your transaction.
The payment provider and contracting seller depend on the purchase. Review the checkout, invoice or receipt and the applicable provider’s privacy notice. Contact info@careverse.ai if you need help identifying the responsible party or exercising a privacy right.
For payment-security concerns, contact info@careverse.ai without including full payment credentials. A support request does not authorize an additional charge or waive a right to dispute an unauthorized transaction.
For refunds, cancellation and billing corrections, consult the Refund Policy. Privacy requests and refund requests address different matters; submitting one does not prevent you from submitting the other.
We use information to respond to inquiries; provide and administer requested Services; support care discovery and coordination; manage accounts and memberships; facilitate authorized communications and transactions; provide support; maintain and evaluate service performance; prevent fraud and misuse; protect systems and users; comply with legal obligations; and establish, exercise, or defend legal claims. Optional marketing updates are sent subject to applicable consent and opt-out requirements.
Depending on the service and authorized activity, recipients may include care providers and other organizations involved in fulfilling your request; hosting, communications, AI, support, analytics, security, and payment service providers; and professional advisers. A processor’s access must be limited by appropriate instructions and contractual protections. A recipient acting independently, such as a healthcare provider or payment institution, may also process information under its own legal obligations and privacy notice.
We may disclose information when legally required, in response to valid legal process, or where permitted and necessary to protect rights, safety, and security. A corporate transaction may involve relevant information, subject to applicable law, confidentiality safeguards, and required notice. A transaction does not eliminate existing privacy obligations or authorize incompatible uses without a lawful basis.
We do not sell your personal information to third parties. This statement must be interpreted using the applicable statutory definition of “sale,” including where a law covers nonmonetary consideration. Any separate use or disclosure constituting regulated “sharing” or targeted advertising remains subject to the notices, consents, and opt-out rights applicable to that activity. A referral or platform fee does not authorize unrestricted disclosure of health information.
Safety investigation, abuse prevention, and evaluation may require review of relevant interactions, action records, and incident evidence by appropriately authorized personnel or contracted reviewers. Such processing must have a valid legal basis and remain limited to what is necessary for the identified purpose. Synthetic, redacted, or appropriately de-identified test material should be used where it can reasonably meet that purpose. Live health records are not authorized for unrestricted testing, training, or human review merely because safety is the stated objective.
4.1. AI-assisted Services. Careverse™ may provide artificial intelligence–assisted functionality, including Careverse Lidia™ (“Lidia”), to assist users in identifying care options, understanding information, and coordinating care-related activities. Depending on the functionality used, information submitted through these services may include questions, messages, uploaded documents, and personal or health-related information. Such information is subject to this Policy and any additional notices applicable to the relevant service.
4.2. Credentials and sensitive information. Users should not disclose passwords, one-time passcodes, recovery codes, or other authentication credentials in conversations with Lidia, other AI tools, or individuals purporting to provide assistance. Credentials should be entered only through the applicable service’s official authentication interface. Users should limit submissions to information reasonably necessary for the requested assistance and must have appropriate authority or permission before submitting information concerning another individual.
4.3. Connected accounts and authorized activities. Before authorizing an account connection or an activity involving a healthcare provider, insurer, pharmacy, payment service, or other third party, users should review the information to be accessed or disclosed, the purpose of the connection, and the permissions requested. Authorization for a particular connection or activity does not, by itself, constitute consent to unrelated processing, marketing, or AI model training.
Users may request assistance withdrawing consent or disconnecting an account by contacting info@careverse.ai. Withdrawal may affect related functionality. Subject to applicable law, withdrawal does not invalidate prior lawful processing or automatically require deletion of records that must otherwise be retained. Information already received by an independent third party remains subject to that party’s applicable obligations and privacy practices.
4.4. Third-party AI services. Independently accessed third-party AI tools are governed by their respective terms and privacy policies. Before providing information to such tools, users should review their access permissions, retention practices, model-training practices, and privacy controls. This provision does not limit Careverse™’s obligations concerning service providers that process personal information on its behalf.
4.5. Processing limits. Processing an interaction to generate a response is distinct from retaining it for quality review or using it to train or improve a model. Additional uses require a disclosed purpose, a valid legal basis, and any separately required consent or authorization. Access to sensitive information by a model provider or human reviewer remains subject to applicable confidentiality, purpose-limitation, and health-data requirements. Submission of information does not grant an unrestricted right to use it for model training.
4.6. Accuracy and professional judgment. AI-generated content may be inaccurate, incomplete, or outdated. Lidia’s care-navigation assistance does not constitute a medical diagnosis or replace the judgment of a qualified healthcare professional. Users should verify material information before relying upon it and consult an appropriate professional regarding medical decisions. The Services are not an emergency response service.
4.7. Preservation of rights. Nothing in this Section waives any nonwaivable privacy or consumer protection right or relieves Careverse™ of its obligations under applicable law.
4.8. Scope of delegated authority. Permission to converse with an AI assistant does not, by itself, authorize the assistant to book, cancel, or modify an appointment; transmit a message or record; initiate a payment; alter a provider relationship; or perform another consequential action. Any such action must remain within the permissions validly granted for the particular activity and must obtain any confirmation required by the applicable workflow, law, or authorization. Information retrieved from a website, document, message, or other external source is not an instruction from the user and cannot enlarge that authority.
4.9. Handoffs and completion status. A recommendation, referral request, or attempted transmission is not evidence that a provider has accepted responsibility or that an appointment or other action is complete. Completion and acceptance must be distinguished from a pending or failed attempt. Any handoff must be limited to an authorized recipient and the information necessary for its purpose, subject to applicable law. An unsuccessful connection does not establish a clinical relationship or guarantee human monitoring or intervention.
4.10. Uncertainty and clinical boundaries. Neither an AI-generated confidence indication nor a lack of escalation establishes that a condition is safe. Care-navigation functionality does not confer authority to prescribe, change medication, or perform activities reserved to a licensed professional. Source quality, currency, supported languages, and service availability affect the reliability of assistance. If you believe you are experiencing an emergency, contact local emergency services directly rather than waiting for a response or handoff through the platform.
AI processing may involve the service providers supporting the feature you choose. The applicable feature, connection and privacy disclosures govern the information involved. You may request information about recipients and processing associated with your use by contacting info@careverse.ai.
Provide only information necessary for your requested task. A conversation does not grant permission to access connected records or undertake an external action. Review the permissions and any separate authorization before connecting an account.
Careverse™’s policy is that users’ conversations, documents and health information are not used for model training by default. Any exception requires separate review and the applicable notice, lawful basis, consent and contractual protections. General acceptance of this Privacy Policy does not authorize such training. This policy statement does not constitute a certification of every provider’s configuration.
Authorized review of interactions may occur for support, safety investigation or another disclosed lawful purpose. Membership in a family, household or employer plan does not, by itself, authorize access to another person’s private information or care conversations.
Conversations, documents, recordings, transcripts and related service records are subject to the retention principles in Section 11. You may request access, deletion, recipient information or assistance withdrawing authorization. Legal retention exceptions and the role of the responsible organization may affect the response.
Our AI Safety page explains the safety workstream and distinguishes proposed controls from demonstrated implementation. It is not a certification of clinical performance, security or regulatory compliance. Report suspected unintended disclosure or unauthorized action to info@careverse.ai.
Careverse Partner Portal — Google Contacts. Connecting Google Contacts is optional and separate from signing in. With your permission, the portal uses the Google People API with read-only contacts access (contacts.readonly) to retrieve contact names and email addresses so you can choose recipients for partner invitations. It does not edit or delete your Google contacts or access your Gmail messages. The import fetches contacts directly from Google into your browser; it does not upload the imported address book or Google access token to Careverse servers. Imported contacts remain in the current page’s memory and can be removed using the portal’s clear control or by reloading or closing the page. A short-lived access token is used for the import and is not stored on Careverse servers. When you open an invitation in Gmail, Outlook, or your email application, the selected recipient address and invitation text are passed to that service so you can review and send the message yourself; the portal does not send automatically. That email service’s privacy and retention practices apply to drafts and messages. Imported Google Contacts data is not sold, used for advertising, or used to train AI models. You may revoke access through your Google Account connections at https://myaccount.google.com/connections; revocation prevents future authorized imports but does not remove messages or drafts already created in your email service. For assistance, use the contact details in Section 18.
Health-related information is not automatically protected health information (“PHI”) under the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations, as amended (“HIPAA”). Applicability depends on the relevant entity, relationship, and processing activity. A consumer-facing care inquiry may be subject to consumer privacy laws even when HIPAA does not apply.
Where Careverse™ acts as a business associate or subcontractor business associate, its handling of PHI is governed by HIPAA to the extent applicable and by the relevant business associate agreement. Such an agreement must be in place before PHI is processed where required. Permitted uses and disclosures, subcontractor obligations, safeguards, incident reporting, and assistance with individual rights are governed by that agreement and applicable law. This Policy does not expand those permissions.
A healthcare provider or health plan’s Notice of Privacy Practices governs its own HIPAA-regulated activities. This Policy is not a substitute for that notice and does not itself establish a provider-patient relationship. Requests concerning access, amendment, an accounting of disclosures, restrictions, or confidential communications should be directed to the relevant covered entity; we assist that entity to the extent required by our role and applicable agreement.
Uses or disclosures requiring a valid HIPAA authorization must be supported by a separate, legally sufficient authorization. General acceptance of this Policy is not such an authorization. Records subject to additional confidentiality laws, including qualifying substance use disorder records under 42 CFR Part 2, require the additional protections applicable to those records. Nothing here represents that all Careverse™ Services are HIPAA-covered or independently certified as HIPAA compliant.
Consumer health data laws may protect identifiable information about physical or mental health, care-seeking activity, treatment, prescriptions, and inferences drawn from that information even when HIPAA does not apply. Where applicable, including under Washington’s My Health My Data Act and Nevada’s consumer health data law, collection and sharing must satisfy the relevant consent requirements or a specific permitted exception.
Consent to collect consumer health data is distinct from consent to share it where the law requires separate consent. A requested service exception is limited to processing necessary to provide that service; it does not authorize unrelated advertising or secondary uses. Any sale requiring a separate written authorization may not proceed on the basis of this Policy.
Depending on applicable law, individuals may confirm whether consumer health data is collected, obtain access and information about recipients, withdraw consent, request deletion, and appeal a denial. Submit a request using Section 18. Where required, deletion extends to applicable processors, recipients, and backups subject to the statutory rules and timeframes. We will explain any lawful exception relied upon.
This section explains general consumer health data rights. Service-specific disclosures and any separate consumer health data privacy notice required by applicable law supplement this Policy. Acceptance of this Policy does not authorize a prohibited use, health-related geofencing, or a sale requiring separate authorization. Contact info@careverse.ai to ask about the information or recipients associated with a particular interaction.
This Section applies where processing is subject to Regulation (EU) 2016/679 (“EU GDPR”) or the United Kingdom’s applicable data protection legislation, including the UK GDPR and Data Protection Act 2018, as amended. References to rights and obligations are subject to the applicable territorial scope, statutory conditions, and exemptions.
For ordinary personal data, the relevant bases are: performance of a contract or steps requested before entering a contract for account administration and requested Services; compliance with legal obligations for required records and lawful demands; legitimate interests for proportionate security, fraud prevention, support, and service administration, subject to a balancing assessment; and consent for optional activities requiring it, including relevant marketing and nonessential tracking. A stated basis does not excuse processing that is unnecessary or disproportionate.
Health data and other special-category data require an applicable Article 9 condition in addition to an Article 6 basis. Where explicit consent is relied upon, it must be obtained separately and be capable of withdrawal. A healthcare-related condition cannot be assumed merely because a service concerns care; its professional-confidentiality and other statutory requirements must be satisfied. Additional requirements may apply to criminal-offence data.
Subject to applicable conditions, you may request access, rectification, erasure, restriction, portability, and information about safeguards for international transfers; object to processing based on legitimate interests; and withdraw consent without affecting prior lawful processing. You may object to direct marketing at any time. Where applicable law provides protections concerning solely automated decisions producing legal or similarly significant effects, you may request the required information, human intervention, an opportunity to express your position, and review of the decision.
We respond without undue delay and ordinarily within one month, subject to lawful extensions and the applicable rules for necessary identity verification or clarification. Where an extension is permitted, we will notify you and give reasons within the required period. You may complain to the competent supervisory authority, including the UK Information Commissioner’s Office, without first contacting us.
Information necessary to provide a requested service may be required for that service; without it, we may be unable to fulfill your request. You may ask us to identify the source and purpose of information obtained from another organization. Contact Section 18 for questions about the responsible controller or applicable privacy contacts. National Legal Services Advisors Inc. is a correspondence contact; that designation does not appoint it as a data protection officer or an EU or UK representative.
Where an applicable state privacy law grants rights concerning our processing, you may request confirmation of processing, access, a copy in a portable format, correction, or deletion. Depending on the law and activity, you may opt out of sale, sharing for cross-context behavioral advertising, targeted advertising, or certain profiling, and may limit specified uses of sensitive personal information. California rights, where applicable, arise under the California Consumer Privacy Act as amended by the California Privacy Rights Act. These rights are subject to applicable exemptions and do not imply that every state law applies to every service.
Requests may be submitted through Section 18. We may request information reasonably necessary to verify an access, correction, or deletion request and to confirm an authorized agent’s authority. We do not require an account solely to submit a request. Opt-out requests will not be subjected to identity verification beyond what applicable law permits.
We respond within the period required by the relevant law, generally 45 days for many state access, correction, and deletion requests, with any extension explained as required. Opt-out and appeal deadlines may differ. Where an appeal right exists, reply to the denial or contact info@careverse.ai with “Privacy Appeal”; we will review the decision and provide the response and regulator complaint information required by your jurisdiction.
We will not unlawfully discriminate or retaliate against you for exercising privacy rights. Legally recognized universal opt-out signals, including Global Privacy Control where applicable, are subject to the protections required by law. A browser’s older “Do Not Track” setting is not necessarily equivalent. You may use Section 16 to request information about categories collected, their sources and purposes, disclosures, recipients, and any sale or sharing relevant to your rights. Service-specific notices at collection supplement this general Policy.
Where Canadian federal or provincial private-sector privacy legislation applies, including PIPEDA or an applicable substantially similar provincial law, personal information is subject to the relevant accountability, appropriate-purpose, meaningful-consent, access, correction, safeguards, and complaint requirements. Express consent is generally appropriate for sensitive information, subject to applicable exceptions. You may request access, correction, information about processing, or withdrawal of consent, subject to legal or contractual restrictions and reasonable notice where permitted.
Information processed outside Canada may be accessible to courts, law enforcement, or government authorities under the laws of that jurisdiction. Outsourcing does not eliminate the responsible organization’s accountability. Quebec residents may have additional rights and notice protections under applicable provincial law. Contact the privacy contact in Section 18; you may also complain to the competent federal or provincial privacy authority.
For other jurisdictions, applicable mandatory local rights and restrictions remain available. A global website does not represent that each service is offered, licensed, or legally available in every country.
Cookies and similar technologies can support security, authentication, preferences, analytics, and, where used, advertising. Information associated with a page visit or care inquiry can reveal sensitive interests; it should not be assumed nonsensitive solely because it is collected by a tracker. The separate Cookie Policy provides related information.
Where prior consent is legally required, nonessential technologies must not be activated before valid consent. Consent must be capable of withdrawal, and rejection must not be treated as acceptance. Where applicable law permits an opt-out framework, the required opt-out mechanisms and recognized signals apply. Browser settings can block or remove cookies, but browser settings alone do not replace any legally required consent mechanism.
Optional marketing messages include an applicable unsubscribe or opt-out mechanism. Opting out of marketing does not necessarily stop transactional, security, or legally required communications. Consent to care coordination is not blanket consent to promotional calls or messages. Applicable telephone, text-message, and electronic-marketing rules govern each communication channel.
Personal information is retained only for as long as reasonably necessary for its disclosed purpose, subject to applicable legal requirements. Relevant criteria include the duration of the relationship and requested activity; the need to resolve an open inquiry or dispute; mandatory financial, corporate, or healthcare record requirements; security and fraud-prevention needs; and applicable limitation periods.
Retention depends on the record and purpose. Account and contact records relate to the active relationship and unresolved obligations. Care requests, messages, documents, and AI interactions relate to the requested task, customer instructions, and applicable recordkeeping requirements. Transaction records may be retained for financial and legal obligations. Security logs and cookie identifiers relate to their security purpose or technology lifetime. You may request the retention period or criteria applicable to your information through Section 16.
Deletion requests are assessed under applicable law and the relevant controller or customer relationship. Where records must be retained, we will explain the applicable reason when required and limit further use accordingly. Disconnection, account closure, and deletion are distinct actions. De-identified or aggregated information remains outside a particular privacy regime only if the applicable legal standard and any required restrictions against reidentification are satisfied.
We use reasonable administrative, technical, and physical safeguards appropriate to the information and relevant processing risks. No transmission method or storage system can be guaranteed completely secure. This limitation does not waive any statutory security duty or excuse failure to implement required safeguards.
Where a security incident triggers a notification obligation, affected individuals, business customers, regulators, or other recipients will be notified in the manner and timeframe required by the applicable law or agreement. Depending on the circumstances, HIPAA, the FTC Health Breach Notification Rule, state breach-notification laws, GDPR, or other applicable requirements may govern. A legally reportable breach can include unauthorized disclosure or use, not only an external intrusion.
Report suspected unauthorized access or disclosure promptly using Section 18. Do not include passwords or unnecessary medical records in a report.
Safety governance framework. Careverse™’s documented safety workstream addresses clinical risk, agent and data risk, and provider and marketplace integrity. It proposes controls linked to reproducible tests, measurable indicators, accountable ownership, and release decisions. Its scope includes permission boundaries, isolation of users’ information, resistance to malicious instructions embedded in external content, provider identity and credential checks, escalation fallbacks, versioned testing, and containment of critical incidents. The existence of this framework does not establish that every proposed control is implemented, that every test has passed, or that a service has obtained a certification or regulatory clearance.
Incident handling and evidence. Investigation and containment may involve reviewing relevant permissions, action and access records, model or tool versions, handoff status, and provider information. Any resulting access, disclosure, or preservation of personal information must remain necessary, authorized, and subject to applicable law. Preservation for a substantiated incident or legal obligation does not authorize unrelated reuse or indefinite retention. Access to review materials must be limited to persons with an appropriate role and need to know.
Service restrictions. To address an identified safety, security, or integrity concern, Careverse™ may restrict an affected feature, suspend an account or listing, pause an automated workflow, or revert a release, subject to applicable law and contractual obligations. These measures do not waive notification duties, individual privacy rights, or obligations concerning an affected user. Confirmed incidents and testing results may inform subsequent safeguards, but no zero-error or guaranteed-response claim is made.
Careverse™ is based in the United States. Use of cross-border services or recipients may involve processing in the United States or other jurisdictions whose laws differ from those where you reside. Information about relevant processing locations and applicable safeguards may be requested through Section 18.
Where EU or UK law restricts a transfer, an applicable lawful transfer mechanism must be established before the transfer, such as an applicable adequacy decision or appropriate contractual safeguards, together with any required assessment and supplementary protections. We do not claim participation in a certification or adequacy framework unless that participation is separately verified and disclosed. General acceptance of this Policy is not a substitute for a legally valid transfer mechanism.
You may request information about, or an appropriately redacted copy of, relevant transfer safeguards where applicable. A narrow statutory derogation does not authorize unrestricted or routine transfers outside its conditions.
The Services are not directed to children under 13 for independent use. We do not knowingly collect personal information directly from a child under 13 without the legally required parental authorization and safeguards. If you believe a child has submitted information without required authorization, contact us so the matter can be reviewed and addressed.
An adult’s submission of information about a dependent is distinct from the dependent using the Services. A parent, guardian, caregiver, or representative must have lawful authority for the particular information and activity. A household membership does not itself grant access to another member’s medical information, and a family relationship does not eliminate confidentiality rights afforded to a minor or adult under applicable law.
Where applicable children’s privacy law requires parental notice, verifiable consent, or parental access and deletion rights, those protections apply to the relevant activity. Marketing consent is separate from authorization for a child’s participation. Paying for a household plan does not grant unrestricted access to another person’s health records. Requests from parents, guardians, and representatives are subject to verification of authority and the individual’s confidentiality rights. Contact Section 18 to report an authorization concern or request assistance.
Providers, insurers, pharmacies, merchants, employers, and other independent organizations may have separate privacy notices and legal obligations. Review the notices applicable to the service you select. Our links, integrations, or referrals do not give those organizations unlimited permission to receive or use your information. Careverse™ remains responsible for its own processing and for obligations that apply to service providers acting on its behalf.
Provider information and verification. A listing, credential indicator, or verification status should be understood according to the specific check and its scope; it is not a guarantee of current licensure, suitability, appointment availability, or clinical quality. Provider identity, credential, account-security, and availability information may require revalidation. Verification activities involving personal information remain subject to the purposes and protections described in this Policy. Report suspected impersonation, account compromise, inaccurate credentials, or false availability through the privacy or legal contact below so the report can be routed for review.
Sponsorship and rankings. Paid placement or sponsorship, where offered, must be identified as such in the relevant presentation and must not be described as an independent clinical endorsement. Sponsorship does not authorize disclosure of a user’s health information, override applicable provider eligibility requirements, or create authority to act for the user. Personal-information processing for ranking or personalization remains subject to the applicable disclosures, lawful bases, consent requirements, and opt-out rights.
Contact info@careverse.ai to request access, correction, deletion, portability, withdrawal of consent, disconnection assistance, recipient information, or another applicable privacy right. Describe your request and the account or interaction involved using the minimum information necessary. If a secure identity-verification method is needed, we will provide instructions; do not email passwords or authentication codes.
We will identify any additional information reasonably required, explain a denial or applicable exception as required, and provide available appeal instructions. Where we act for a business customer or covered entity, we may direct or transmit the request to the responsible organization and assist under the applicable agreement. This routing does not diminish your rights or unlawfully extend deadlines. To appeal a response, reply to info@careverse.ai with the original request reference and the grounds for your appeal. You do not need an account to contact us.
Withdrawal ordinarily operates prospectively and may affect the service that depends on the authorization. It does not retroactively invalidate lawful processing, but may trigger deletion or other obligations under applicable law. You retain the right to complain to a competent regulator.
We may amend this Policy from time to time. Each revised version will identify its effective date and the date it was last updated. Where required by applicable law, we will provide additional notice of material changes and obtain consent before implementing changes requiring such consent. Publication of a revised policy does not, by itself, authorize materially different uses of previously collected personal information.
Care Access Technologies LLC is the platform operator responsible for the processing described in this Policy, subject to the roles explained in Section 1. National Legal Services Advisors Inc. is the designated correspondence contact. Email: info@careverse.ai. Mailing address: 7027 W Broward Blvd, Unit #3170, Plantation, FL 33317, United States. Telephone: +1 (415) 466-8913.
For legal correspondence, use info@careverse.ai. These contacts do not substitute for a healthcare provider’s designated privacy officer where that provider is responsible for the records concerned.