Privacy Policy

Scope

This Privacy Policy describes how Integrated Solutions doing business as Peacemaker Elder Care LLC ("Integrated Solutions," "we," "us," or "our") handles personal information through Growth OS in the United States. It applies to visitors, account holders, organization users, support contacts, and people whose information an authorized user submits for a permitted outreach workflow.

This service is separate from any elder-care or personal-services activity. It is not intended to receive medical records or protected health information, and no healthcare-provider relationship is created through the service.

Personal information we collect

Depending on how the service is used, we collect:

• account and profile information, such as name, email address, organization, role, and authentication identifiers;
• workspace settings, industry preferences, and administrative permissions;
• content supplied for drafts, including campaign instructions, message text, business-contact details, and recipient information;
• authorized and already-redacted meeting notes, transcript text, and approved enablement materials pasted for transient processing in a referral workspace;
• generated drafts and referral-growth artifacts, minimum business metadata, verification items, review decisions, run history, usage events, and credit-ledger records;
• device, request, security, diagnostic, and audit information needed to operate and protect the service;
• support communications and privacy requests;
• billing and transaction records if paid features are activated, excluding complete payment-card credentials handled by an approved payment processor; and
• connection metadata, authorization scopes, and encrypted token material if an optional provider connection is enabled by the user.

We do not intentionally collect precise geolocation, biometric identifiers, government identifiers, payment-card numbers, account passwords, medical records, protected health information, or children's data through ordinary product workflows.

Sources of personal information

We obtain information directly from users and their organizations, from the application as people use it, from authentication or connection providers a user chooses to link, from service providers that operate the product, and from publicly available or properly licensed business sources selected by an authorized user. A customer that submits another person's information is responsible for having authority and providing any required notice.

How we use personal information and processing purposes

We use personal information to provide accounts and requested workflows; generate, store, personalize, review, copy, and export drafts and referral-growth artifacts; process pasted referral source text transiently without retaining the raw text in the saved result; maintain credits and usage records; authenticate users and enforce permissions; prevent fraud, spam, abuse, and security incidents; provide support; respond to privacy requests; maintain legal and audit evidence; improve reliability and quality using bounded operational information; comply with law; and establish, exercise, or defend legal claims.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising or use it for targeted advertising. We do not use automated decision-making to make legal or similarly significant decisions about people.

Artificial intelligence and AI processing

When a user invokes an AI drafting or referral-growth feature, relevant instructions and permitted content are sent to OpenAI to generate a draft or structured artifact. For referral workspaces, this may include authorized, already-redacted meeting notes, transcript text, or approved enablement materials pasted by the user. Pasted source material is treated as untrusted content, is screened before a model call, and is not retained as raw source text in the saved run. The current configuration uses OpenAI business/API services, for which business inputs and outputs are not used to train models by default unless the account owner affirmatively opts in through provider controls. Users must not submit restricted or sensitive data and must review all output.

The service records limited provider, model, timing, token, quality, and failure metadata for operations and cost control. It is designed not to place message bodies, recipient destinations, credentials, or secrets in observability labels or ordinary audit logs.

Sharing, disclosures, and recipients

We disclose personal information only as reasonably necessary to:

• Cloudflare and OpenAI services used for application hosting, storage, security, support, and AI drafting;
• optional providers such as Google, Microsoft, LinkedIn, or Amazon SES only if the applicable feature is enabled and the user separately connects or authorizes it;
• Stripe for hosted checkout, payment-method storage, invoicing, tax calculation, payment collection, refunds, disputes, and payouts;
• Metronome for pay-as-you-go usage metering, rate calculation, invoice preparation, and billing reconciliation;
• professional advisers, auditors, insurers, and authorities when reasonably necessary or legally required;
• a successor in a merger, financing, acquisition, reorganization, or asset transfer subject to appropriate confidentiality; and
• a customer's authorized organization administrators and users.

Automated sending, Google or Microsoft delegated sending, LinkedIn communications, Amazon SES delivery, and nonessential analytics are not active in the current restricted release. Paid checkout and pay-as-you-go processing are available only after the application displays them as enabled. We will update the public subprocessor information before materially expanding production processing.

Retention

We retain personal information only for the purpose and period reasonably necessary, subject to deletion requests, security needs, legal holds, and legal requirements:

• expired authentication transactions and similar temporary secrets: no longer than needed for the short transaction window;
• active provider tokens: only while the connection remains active, with destruction initiated on disconnect, revocation, invalid grant, or account deletion;
• failed draft content: generally 30 days after terminal failure;
• completed drafts and recipient content: generally 180 days after last activity, unless deleted earlier by the customer;
• raw meeting notes, transcript text, and approved enablement source text pasted into referral workspaces: processed transiently for the requested operation and not stored in the saved result or ordinary application history;
• generated referral-growth artifacts and minimum associated business metadata: generally 180 days after last activity, unless deleted earlier by the customer;
• account and workspace information: while the account is active and generally up to 30 days after verified closure, except retained evidence;
• security, abuse, provider-operation, authorization, and audit evidence: generally 12 months;
• legal acceptance, billing, tax, refund, and dispute evidence: up to seven years where reasonably necessary for accounting, legal, or claim purposes, while minimizing retained content;
• active suppression and do-not-contact records: for as long as needed to honor the opt-out and avoid renewed contact; and
• backups: inaccessible to ordinary product use after deletion and aged out under the provider's ordinary protected backup cycle, generally within 90 days.

We may retain information longer when a documented legal hold, fraud investigation, unresolved delivery status, tax rule, or other law requires it. We may aggregate or de-identify information so it no longer reasonably identifies a person.

Security

We use administrative, technical, and organizational safeguards designed for the nature of the service, including purpose-based access, encryption of provider-token material, bounded logging, server-side authorization, suppression controls, audit records, dependency review, and security testing. No system is completely secure, and we cannot guarantee that unauthorized access or loss will never occur. Users are responsible for protecting their credentials and promptly reporting suspected compromise.

Privacy rights and choices

Depending on applicable law, a person may request confirmation of processing, access, correction, deletion, or a portable copy of personal information and may opt out of sale, targeted advertising, or qualifying profiling. We do not currently sell personal information, use it for targeted advertising, or perform qualifying profiling. Authorized account controls also support export and account-deletion requests.

Send a request to ostingpaul4@gmail.com. We may verify identity and authority before acting. Authorized agents may submit requests where law permits, subject to verification. If we deny a request, the response will explain how to appeal where applicable; an appeal may be sent to the same address with "Privacy Appeal" in the subject line. A person may contact the appropriate state attorney general if an appeal is denied.

We will not discriminate against a person for exercising a privacy right. Certain information may be exempt or retained when needed for security, legal compliance, another person's rights, or establishment or defense of claims.

Cookies and tracking choices

The current restricted release uses only cookies or similar storage reasonably necessary for authentication, security, session continuity, preferences, and core operation. It does not use nonessential advertising cookies or cross-site behavioral analytics. Because we do not sell or share personal information for targeted advertising, Global Privacy Control and similar opt-out signals do not change those practices; we will honor legally recognized signals if those practices change.

Children

The service is for people age 18 or older and is not directed to children. We do not knowingly collect personal information from anyone under 18. Contact us if you believe a minor submitted information so we can investigate and delete it as appropriate.

Changes

We may update this Privacy Policy to reflect changes in law, vendors, features, or processing. We will publish the effective version and provide additional notice or obtain consent when required for a material change. Prior public versions will remain available through the legal-document history controls.

Contact

Privacy requests and questions may be sent to ostingpaul4@gmail.com or mailed to Integrated Solutions doing business as Peacemaker Elder Care LLC, 13410 Shady Creek Circle, Louisville, KY 40299, USA.