Privacy Policy

1. Introduction

Senior Care Marketing AI, LLC ("we," "us," or "our"), a Wyoming limited liability company, operates SCM Studio, a marketing intelligence platform designed specifically for senior living communities. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

We are committed to protecting your privacy. We never sell your data to third parties and use your information solely to provide and improve our services.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address - Required for account creation and communication
• Full name - To personalize your experience
• Password - Securely hashed and never stored in plain text
• Profile information - Optional details like avatar and bio

2.2 Community/Project Data

When you use our platform to analyze senior living communities, we collect and process:

• Community information - Names, URLs, locations, and service details
• Marketing data - Keywords, care levels, services, and marketing performance metrics
• Google Ads data - Campaign data accessed through your authorized Google Ads accounts
• Website content - Public website information analyzed for marketing insights
• Analytics data - Google Analytics and Search Console data you authorize us to access
• Report data - Generated marketing reports, recommendations, and analysis

2.3 Usage Information

We automatically collect certain information about your use of our platform:

• Log data - IP addresses, browser type, pages visited, timestamps
• Analytics data - Page views, session duration, feature usage (via Vercel Analytics)
• Authentication data - Login timestamps, session tokens, device information

3. How We Use Your Information

We use the collected information to:

• Provide our services - Generate marketing intelligence, reports, and recommendations
• Manage your account - Authentication, account security, and customer support
• Communicate with you - Service updates, report notifications, and support responses
• Improve our platform - Analyze usage patterns to enhance features and user experience
• Ensure security - Detect and prevent fraud, abuse, and security incidents
• Legal compliance - Comply with applicable laws and regulations

We do NOT use your data for advertising, marketing to third parties, or any purpose unrelated to providing our core services to you.

4. Third-Party Services

We use carefully selected third-party services to operate our platform. These services have access to certain data as necessary to perform their functions:

4.1 Infrastructure & Storage

• Supabase - Authentication, database, and file storage (US-based)
• Vercel - Application hosting and file storage (US-based)

4.2 Communication Services

• Resend - Transactional emails (verification codes, notifications)

4.3 Security Services

• HCaptcha - Bot protection during account creation

4.4 Analytics

• Vercel Analytics - Anonymous usage analytics (page views, performance metrics)

4.5 Marketing Platform APIs

When you connect your accounts, we access these services on your behalf with your explicit authorization:

• Google Ads API - To read and optimize your advertising campaigns
• Google Analytics - To analyze your website traffic and performance
• Google Search Console - To access your search performance data
• Firecrawl - To analyze public website content for marketing insights

These third-party services are bound by their own privacy policies and data processing agreements. We ensure all service providers maintain appropriate security measures and comply with applicable data protection laws.

5. Data Sharing and Disclosure

We do NOT sell, rent, or trade your personal information to third parties. We may share your information only in these limited circumstances:

• Service providers - With vendors who perform services on our behalf (as listed in Section 4)
• Legal requirements - When required by law, subpoena, or court order
• Business transfers - In connection with a merger, acquisition, or sale of assets (with notice to you)
• With your consent - When you explicitly authorize us to share specific information

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption - All data transmitted over HTTPS/TLS; passwords are hashed using bcrypt
• Access controls - Role-based access and authentication for all user data
• Database security - Row-level security policies in Supabase PostgreSQL
• Regular updates - Security patches and software updates applied promptly
• Monitoring - Automated security monitoring and incident response procedures

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but continuously work to improve our security practices.

7. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account data - Retained while your account is active and for 90 days after deletion
• Report data - Retained for the duration of your subscription and for historical reference
• Log data - Retained for 90 days for security and troubleshooting purposes
• Backup data - Retained for 30 days in encrypted backups

8. Your Rights

You have the following rights regarding your personal information:

• Access - Request a copy of your personal data
• Correction - Update or correct inaccurate information
• Deletion - Request deletion of your account and associated data
• Export - Receive your data in a portable format (JSON)
• Objection - Object to certain data processing activities
• Withdrawal - Withdraw consent for optional data processing

To exercise these rights, please contact us at info@seniorcaremarketing.ai. We will respond to your request within 30 days.

9. State-Specific Privacy Rights

9.1 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected and how it's used
• Right to delete personal information (subject to exceptions)
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

9.2 Other US States

We extend similar privacy rights to residents of all US states. Contact us at info@seniorcaremarketing.ai to exercise your rights.

10. International Users

Our services are provided from the United States and are intended for users located in the United States. All data is stored on servers located in the United States. If you access our platform from outside the US, please be aware that your information will be transferred to, stored, and processed in the United States.

By using our services, you consent to the transfer of your information to the United States and agree that US law governs the collection and use of your information.

11. Children's Privacy

Our platform is a business-to-business (B2B) service not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete that information immediately.

12. Cookies and Tracking

We use minimal cookies and tracking technologies:

• Essential cookies - Required for authentication and security (Supabase auth tokens)
• Analytics - Anonymous page view tracking via Vercel Analytics (no personal data)

We do not use advertising cookies or third-party tracking pixels. You can manage cookies through your browser settings, though disabling essential cookies may affect platform functionality.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a notice on the platform dashboard

Your continued use of the platform after changes are posted constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

15. Data Processing Agreement

For enterprise customers who require a Data Processing Agreement (DPA) or Business Associate Agreement (BAA) under HIPAA, please contact us at info@seniorcaremarketing.ai to discuss your specific requirements.