LEGAL

Privacy Notice

Effective July 29, 2026

1. Scope

This notice explains how Home Care Back Office LLC, operating the Here service, handles information on its websites, customer console, communications, and connected workflows. For agency operational data, the agency ordinarily determines the purpose of processing and Here acts as its service provider or processor. A business associate agreement governs protected health information when required.

2. Information we collect

We collect account and contact details; agency, location, role, policy, and billing configuration; connection metadata and secret references; task instructions; authorized records from connected systems; communications and consent status; workflow events, approvals, exceptions, evidence references, and outcomes; device, security, and audit events; and support communications. Credential values are not stored in application records, prompts, analytics, evidence, or billing metadata.

3. How information is collected

Information comes from agency users, authorized OAuth providers and connected systems, approved browser sessions, communications services, and the operation and security of the service. Here does not ask users to send passwords, MFA codes, card numbers, or protected health information through chat or ordinary support messages.

4. How we use information

We use information to authenticate users; configure tenants and policies; perform selected outcomes; route approvals and exceptions; reconcile system-of-record results; prevent duplicate or unauthorized actions; create evidence and invoice records; secure, monitor, and improve the service; provide support; and meet contractual and legal duties.

5. AI and model use

Approved task context may be sent to contracted AI services under the applicable security and data-processing terms. Credentials are injected outside the model. Customer data is not used for cross-customer model training without express written permission. Deterministic policy checks, evidence validation, and human approvals remain authoritative for sensitive actions.

6. Disclosure

We disclose information to vendors that provide hosting, identity, communications, accounting connectivity, security, support, and other contracted service functions; to the agency and its authorized users; when an agency directs us; during a corporate transaction subject to appropriate protections; or when legally required. We do not sell personal information or share it for cross-context behavioral advertising.

7. Security and tenant isolation

Here uses tenant-scoped authorization, encryption in transit and at rest, managed secrets, least-privilege access, audit trails, workflow kill switches, backups, and security monitoring. No system is perfectly secure. Agencies must promptly report suspected compromise and revoke affected connections when appropriate.

8. Retention and deletion

We retain information for the period needed to provide the service, preserve required audit and billing records, resolve disputes, meet contractual schedules, and comply with law. Retention varies by data class and agency agreement. Disconnecting a system revokes or disables access and begins the applicable credential, browser-profile, and data deletion process, subject to required legal holds and immutable audit retention.

9. Choices and rights

Agency administrators may manage members, connections, agent display names, goals, approvals, and revocation in the console. Individuals may request access, correction, deletion, or other rights available under applicable law. When Here processes data for an agency, the request may be referred to that agency for authorization.

10. Children and international use

Here is a business service and is not directed to children. The service is operated for United States agencies. An agency must not enable use in another jurisdiction without confirming that its agreement and configuration permit it.

11. Changes and contact

We may update this notice as the service and legal requirements change. The effective date above identifies the current version. Privacy and data requests may be submitted through the signed-in Here console or to the contact identified in the agency’s order form.