Privacy Policy

Depending on how your agency uses the Service, we may process:

• Account Data: Names, work emails, roles, agency identifiers, invited user information, authentication data handled by our authentication provider, and account settings.
• Agency Operational Data: Caregiver profiles, client records, family contacts, schedules, visits, availability confirmations, caregiver workflows, AI visit reports, family updates, incident notes, recruiting/onboarding readiness records, EVV/compliance readiness records, operational alerts, and other records your agency enters or routes through RevCare.
• Payroll, Billing, And Payment Data: Payroll readiness records, overtime exposure data, billing records, subscription status, invoices, payment status, and limited billing metadata supplied by Stripe. We do not store full payment card numbers.
• Technical And Analytics Data: IP address, browser or device identifiers, timestamps, device type, diagnostics, crash signals, fraud-prevention telemetry, usage events, and product analytics used to operate, secure, and improve the Service.

We use information to:

• Authenticate users and manage agency workspaces.
• Enforce role-based access controls.
• Provide owner/admin, caregiver, and client/family portal features.
• Support staffing continuity, no-show prevention, burnout prevention, operational alerts, AI visit reports, payroll/billing/payment visibility, EVV/compliance readiness, recruiting/onboarding readiness, client availability confirmation, caregiver visit confidence, and family communication workflows.
• Operate security monitoring, platform reliability, backups, and abuse prevention.
• Communicate about the Service, support requests, subscription billing, and required legal notices.
• Meet legal obligations and respond to lawful requests where applicable.

We use Supabase for hosted authentication, database storage, file storage where enabled, and related application APIs.

Supabase processes data on our instructions to run the Service. Configuration choices such as row-level security, audit logging, and region selection may be used to help protect agency data.

Subscriptions and checkout flows are processed by Stripe.

Stripe receives payment details entered on Stripe-hosted or Stripe-powered screens. RevCare receives limited billing metadata needed to provision accounts, manage trials, sync subscription status, process renewals, and display billing information. We do not store full card numbers.

We may use hosting and edge providers such as Vercel to deliver the web application.

We may use email or SMS providers to send operational messages, alerts, caregiver reminders, family updates, account notices, and support communications.

Agencies may optionally connect third-party systems such as EVV, payroll, calendar, or other operational vendors. Those vendors process information as needed to perform the services enabled by your agency.

Your agency owns the operational data you provide to RevCare, subject to our Terms.

We retain information while your account is active and for a reasonable period afterward for backups, fraud prevention, security, legal compliance, dispute resolution, and legitimate business purposes.

You may request deletion or export assistance by contacting us.

We do not sell personal information.

We do not sell protected health information.

We do not share data for cross-context behavioral advertising.

RevCare is designed to support HIPAA-conscious operations for home care agencies.

Whether specific data in your workspace is protected health information, and whether a Business Associate Agreement is required, depends on your use case, configuration, and agreements with us.

Where a Business Associate Agreement is in place and the Service is configured appropriately, RevCare supports safeguards commonly expected in healthcare-adjacent software, such as access controls, encryption in transit, logging, permission boundaries, and vendor management.

This Privacy Policy does not replace your agency's own compliance program, policies, training, or legal counsel. RevCare does not claim HIPAA certification.

We implement reasonable administrative, technical, and organizational measures designed to protect information.

These may include role-based access controls, authentication safeguards, encryption in transit, logging, vendor controls, monitoring, and internal operational safeguards.

No method of transmission or storage is completely secure. Users should use strong passwords, protect account access, and limit access to staff who need it.

If we determine that a security incident affects information in the Service, we will take appropriate steps to investigate, contain, remediate, and notify affected customers or authorities where required by applicable law and our agreements.

Authorized agency owners may request reasonable assistance with data export, correction, or deletion. Some records may be retained where needed for security, audit, backup integrity, legal compliance, billing, dispute resolution, or legitimate business operations.

The Service is intended for use by home care agencies and authorized users. It is not directed to children under 13.

We may update this Privacy Policy periodically. Material changes will be reflected by updating the "Last Updated" date and, where appropriate, providing additional notice inside the Service.

Privacy questions or requests: privacy@revcarehomecare.com

Support questions: support@revcarehomecare.com