Skip to document
ScaleCurrent by Integrated SolutionsLegal documents

privacy

Privacy Policy

Version 2026-09-10.v6Effective 9/11/2026Published 9/11/2026

Scope

This Privacy Policy describes how Integrated Solutions doing business as Peacemaker Elder Care LLC ("Integrated Solutions," "we," "us," or "our") handles personal information through ScaleCurrent in the United States. It applies to visitors, account holders, organization users, support contacts, and people whose information an authorized user submits for a permitted outreach workflow.

This service is separate from any elder-care or personal-services activity. It is not intended to receive medical records or protected health information, and no healthcare-provider relationship is created through the service.

Personal information we collect

Depending on how the service is used, we collect:

  • account and profile information, such as name, email address, organization, role, and authentication identifiers;
  • workspace settings, industry preferences, and administrative permissions;
  • content supplied for drafts, including campaign instructions, message text, business-contact details, and recipient information;
  • authorized and already-redacted meeting notes, transcript text, and approved enablement materials pasted for transient processing in a referral workspace;
  • generated drafts and referral-growth artifacts, minimum business metadata, verification items, review decisions, run history, usage events, and credit-ledger records;
  • first-party website analytics, including pages viewed, referring source, approximate location, browser and device category, and interactions such as scrolling, outbound-link clicks, video engagement, and file downloads;
  • device, request, security, diagnostic, and audit information needed to operate and protect the service;
  • support communications and privacy requests;
  • billing and transaction records if paid features are activated, excluding complete payment-card credentials handled by an approved payment processor; and
  • connection metadata, authorization scopes, and encrypted token material if an optional provider connection is enabled by the user.

We do not intentionally collect precise geolocation, biometric identifiers, government identifiers, payment-card numbers, account passwords, medical records, protected health information, or children's data through ordinary product workflows.

Sources of personal information

We obtain information directly from users and their organizations, from the application as people use it, from authentication or connection providers a user chooses to link, from service providers that operate the product, and from publicly available or properly licensed business sources selected by an authorized user. A customer that submits another person's information is responsible for having authority and providing any required notice.

How we use personal information and processing purposes

We use personal information to provide accounts and requested workflows; generate, store, personalize, review, copy, and export drafts and referral-growth artifacts; process pasted referral source text transiently without retaining the raw text in the saved result; maintain credits and usage records; authenticate users and enforce permissions; prevent fraud, spam, abuse, and security incidents; provide support; respond to privacy requests; maintain legal and audit evidence; improve reliability and quality using bounded operational information; comply with law; and establish, exercise, or defend legal claims.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising or use it for targeted advertising. We do not use automated decision-making to make legal or similarly significant decisions about people.

Artificial intelligence and AI processing

When a user invokes an AI drafting or referral-growth feature, relevant instructions and permitted content are sent to OpenAI to generate a draft or structured artifact. For referral workspaces, this may include authorized, already-redacted meeting notes, transcript text, or approved enablement materials pasted by the user. Pasted source material is treated as untrusted content, is screened before a model call, and is not retained as raw source text in the saved run. The current configuration uses OpenAI business/API services, for which business inputs and outputs are not used to train models by default unless the account owner affirmatively opts in through provider controls. Users must not submit restricted or sensitive data and must review all output.

The service records limited provider, model, timing, token, quality, and failure metadata for operations and cost control. It is designed not to place message bodies, recipient destinations, credentials, or secrets in observability labels or ordinary audit logs.

Sharing, disclosures, and recipients

We disclose personal information only as reasonably necessary to:

  • Cloudflare and OpenAI services used for application hosting, storage, security, support, and AI drafting;
  • Google Analytics 4 for first-party website traffic and interaction measurement with Google Signals and advertising-personalization signals disabled;
  • optional providers such as Google, Microsoft, LinkedIn, or Amazon SES only if the applicable feature is enabled and the user separately connects or authorizes it;
  • Stripe for hosted checkout, payment-method storage, invoicing, tax calculation, payment collection, refunds, disputes, and payouts;
  • Metronome for pay-as-you-go usage metering, rate calculation, invoice preparation, and billing reconciliation;
  • professional advisers, auditors, insurers, and authorities when reasonably necessary or legally required;
  • a successor in a merger, financing, acquisition, reorganization, or asset transfer subject to appropriate confidentiality; and
  • a customer's authorized organization administrators and users.

Automated sending, Google or Microsoft delegated sending, LinkedIn communications, and Amazon SES delivery are not active in the current restricted release. Google Analytics 4 is active for first-party website measurement. The implementation disables Google Signals, denies advertising storage, advertising user data, and advertising personalization, disables automatic site-search measurement, automatic form-interaction measurement, and browser-history page-view collection, and sends page paths without URL query strings. Paid checkout and pay-as-you-go processing are available only after the application displays them as enabled. We will update public processor information before materially expanding production processing.

Retention

We retain personal information only for the purpose and period reasonably necessary, subject to deletion requests, security needs, legal holds, and legal requirements:

  • expired authentication transactions and similar temporary secrets: no longer than needed for the short transaction window;
  • active provider tokens: only while the connection remains active, with destruction initiated on disconnect, revocation, invalid grant, or account deletion;
  • failed draft content: generally 30 days after terminal failure;
  • completed drafts and recipient content: generally 180 days after last activity, unless deleted earlier by the customer;
  • raw meeting notes, transcript text, and approved enablement source text pasted into referral workspaces: processed transiently for the requested operation and not stored in the saved result or ordinary application history;
  • generated referral-growth artifacts and minimum associated business metadata: generally 180 days after last activity, unless deleted earlier by the customer;
  • Google Analytics user- and event-level data associated with cookies: two months under the property retention controls, while standard aggregated reports may remain available longer under Google's service controls;
  • account and workspace information: while the account is active and generally up to 30 days after verified closure, except retained evidence;
  • security, abuse, provider-operation, authorization, and audit evidence: generally 12 months;
  • legal acceptance, billing, tax, refund, and dispute evidence: up to seven years where reasonably necessary for accounting, legal, or claim purposes, while minimizing retained content;
  • active suppression and do-not-contact records: for as long as needed to honor the opt-out and avoid renewed contact; and
  • backups: inaccessible to ordinary product use after deletion and aged out under the provider's ordinary protected backup cycle, generally within 90 days.

We may retain information longer when a documented legal hold, fraud investigation, unresolved delivery status, tax rule, or other law requires it. We may aggregate or de-identify information so it no longer reasonably identifies a person.

Security

We use administrative, technical, and organizational safeguards designed for the nature of the service, including purpose-based access, encryption of provider-token material, bounded logging, server-side authorization, suppression controls, audit records, dependency review, and security testing. No system is completely secure, and we cannot guarantee that unauthorized access or loss will never occur. Users are responsible for protecting their credentials and promptly reporting suspected compromise.

Privacy rights and choices

Depending on applicable law, a person may request confirmation of processing, access, correction, deletion, or a portable copy of personal information and may opt out of sale, targeted advertising, or qualifying profiling. We do not currently sell personal information, use it for targeted advertising, or perform qualifying profiling. Authorized account controls also support export and account-deletion requests.

Send a request to ostingpaul4@gmail.com. We may verify identity and authority before acting. Authorized agents may submit requests where law permits, subject to verification. If we deny a request, the response will explain how to appeal where applicable; an appeal may be sent to the same address with "Privacy Appeal" in the subject line. A person may contact the appropriate state attorney general if an appeal is denied.

We will not discriminate against a person for exercising a privacy right. Certain information may be exempt or retained when needed for security, legal compliance, another person's rights, or establishment or defense of claims.

Cookies and tracking choices

The service uses cookies or similar storage reasonably necessary for authentication, security, session continuity, preferences, and core operation. It also uses the first-party `_ga` and `_ga_*` Google Analytics cookies to understand visits and interactions so we can assess and improve the website. Analytics cookie expiration is limited to 180 days in the current implementation. We do not intentionally send Google Analytics names, email addresses, form contents, account identifiers, or URL query strings; we disable Google Signals and deny advertising storage, advertising user data, and advertising personalization. Visitors can block or delete analytics cookies through their browser or privacy tools. We do not use advertising cookies or cross-site behavioral analytics, and we do not sell or share personal information for targeted advertising. We will honor legally recognized opt-out signals if those practices change.

Children

The service is for people age 18 or older and is not directed to children. We do not knowingly collect personal information from anyone under 18. Contact us if you believe a minor submitted information so we can investigate and delete it as appropriate.

Changes

We may update this Privacy Policy to reflect changes in law, vendors, features, or processing. We will publish the effective version and provide additional notice or obtain consent when required for a material change. Prior public versions will remain available through the legal-document history controls.

Contact

Privacy requests and questions may be sent to ostingpaul4@gmail.com or mailed to Integrated Solutions doing business as Peacemaker Elder Care LLC, 13410 Shady Creek Circle, Louisville, KY 40299, USA.