Care Papers, Inc., doing business as CareVP (CareVP, we, or us), provides healthcare and market information to organizations. This policy explains how we handle personal information when you visit our website, request a demo, contact us, use an account, or access CareVP through an API or Model Context Protocol (MCP) client. It also describes separately enabled Workspace and hosted features.
Your AI provider is a separate service you choose. Its privacy policy governs what it does with your conversations and with CareVP results it receives. Connecting it to CareVP does not make that provider our service provider or give CareVP control over its data practices.
1. Our role
We determine how to handle website inquiries, account and billing details, security records, and Service operations information. Depending on applicable law, we act as a business or controller for that information.
When an organization supplies private business content for us to process on its behalf, the organization generally determines the purpose of that processing and we act as its service provider or processor under our agreement. Contact your organization about content or permissions it controls. You may also contact us, and we will help direct the request; working for an organization does not remove your personal privacy rights.
Public-source professional and facility information is a separate part of the Service. A record can describe an individual professional even when it is available from a public source. Public availability does not mean every use or disclosure is unrestricted.
2. Information we collect
Contact and business details. When you request a demo, access, or support, we receive the information you submit, such as your name, work email, organization, role, optional phone number, and message. We also retain our correspondence and delivery records. Do not include patient information in those messages.
Account and authorization details. These can include your user and organization identifiers, account email, role, authentication and session records, permissions, API-key identifiers, and the products your organization is approved to use. Credentials and authentication information require protection even when they do not include a person's name.
Billing and commercial records. These include order and subscription details, billing contacts and addresses, tax information, payment status, and transaction references. Where payment is collected through Stripe, Stripe processes payment-card details; CareVP receives billing and transaction information rather than full card numbers.
Requests and business content. We process the tool arguments, search criteria, facility or geographic identifiers, and other information sent to CareVP. If your organization uses enabled Workspace, upload, or hosted-analysis features, we also process the business contacts, records, files, prompts, and outputs involved in those features. Issue reports may contain the receipt, explanation, and contact information you provide.
Technical and usage information. Our application and hosting systems process network addresses, browser or client information, request times, routes or tool names, response status, usage volume, diagnostic information, and security events. Some application records use a hash or abbreviated identifier; this does not mean every infrastructure or contact-form log is anonymous or that no network address is processed.
Public and other lawful sources. We obtain professional, organizational, facility, geographic, and aggregate information from public agencies and other lawful sources, such as professional identifiers, practice locations, ownership information, regulatory records, and published statistics. We retain source and reporting-period information where available.
3. What happens when your AI calls CareVP
Your AI client sends a request to an authorized CareVP tool and receives the result. CareVP does not automatically receive the rest of your conversation, but it does receive whatever your client includes in the request. That could include words from your question or other context. A result, an issue report, or a record created by a writing tool may also retain information supplied through the request.
For MCP and API usage, application records can include the organization, key prefix or user identifier, tool or endpoint, request time, duration, status, returned row count, result size, and datasets or columns accessed. The gateway usage record hashes the network address rather than storing that address in that particular record. Hashes and key prefixes can still be associated with an account; we do not describe them as anonymous.
Governed tools can create an evidence receipt that preserves the result served, its sources and versions, the authorization context, and a digest of the arguments. The digest field does not store the raw arguments, but the preserved result can contain requested entities, filters, or other request-related information. Receipts support traceability after source data changes. They are not a promise of permanent storage or a complete recording of every interaction.
The public-data MCP retrieval path returns information to your client without asking a CareVP-hosted AI model to generate an answer. Your client and its provider then process that result. A separately enabled CareVP-hosted AI feature can send the context needed for your request to the model provider used for that feature. These are different processing paths.
Your organization's authorized members can access evidence receipts made available to the organization. Owners or administrators can manage member access and view the usage information provided by their administrative tools. Authorized CareVP personnel and service providers may access records as needed to operate, secure, and support the Service. Access remains subject to applicable permissions; receipts are not intended to be public links.
4. How we use information
We use information to:
- Respond to inquiries, arrange demonstrations, and provide requested support.
- Create and administer accounts, organization approvals, integrations, and subscriptions.
- Retrieve data, run authorized tools, and provide the features your organization requests.
- Maintain evidence receipts, usage records, and billing records.
- Authenticate requests, enforce access and usage limits, investigate abuse, and protect the Service.
- Evaluate and improve data discovery, retrieval relevance, coverage, source quality, performance, reliability, and usability.
- Send service, billing, security, and product communications; you may opt out of promotional messages.
- Meet legal obligations, handle disputes, and enforce agreements.
Learning from use of CareVP. We analyze operational usage records, feedback you provide, and public-data results retained in evidence receipts to understand which tools and datasets are useful, where requests fail or return insufficient information, and how to improve retrieval, coverage, citations, and the product experience. We may review request context or retained results to the extent reasonably needed to evaluate service quality, investigate a problem, or support your organization, subject to access controls and your agreement. Such records can reveal business interests even when the underlying data is public; we do not treat them as anonymous merely because they concern public data. We use aggregate statistics or de-identified information where appropriate and do not publish identifiable customer usage or disclose one customer's confidential questions or results to another customer.
We do not use private Customer Content to train or fine-tune AI models. We do not make another customer's private business content available to your organization or use it to create cross-customer business benchmarks. Product analytics and service-quality review are distinct from training or fine-tuning model weights; the product-improvement purposes above do not override this restriction or authorize unrelated reuse of private business content. More protective commitments in an existing agreement continue to apply.
Your independently chosen AI provider's retention and training practices depend on your agreement and settings with that provider. CareVP cannot change them on your behalf.
5. When we disclose information
We disclose information to the following recipients for the purposes described above:
- Your organization and people you authorize, within the permissions of the features you use.
- Your chosen AI client or integration, to fulfill the requests it makes with your authorization. Results retained there are subject to that provider's practices and your controls.
- Service providers, for hosting, storage, communications, billing, security, and processing needed to deliver enabled features. They receive information needed for their role, subject to applicable contractual protections.
- Professional advisers and lawful authorities, where necessary for legal compliance, rights protection, or resolving a dispute. We assess legal requests and provide notice when required and permitted.
- Parties to a business transaction, such as a merger or asset sale, subject to appropriate confidentiality protections and the commitments applicable to the information.
- Other recipients you direct or consent to, including recipients of a report or shared work product.
Provider roles include Amazon Web Services for infrastructure; Postmark or Resend for service email; Stripe where billing is enabled; and Anthropic for separately enabled CareVP-hosted AI processing. Public forms may use Google reCAPTCHA for abuse prevention, as disclosed on the form. Not every provider receives every category of information, and connecting your own AI does not automatically send your requests to Anthropic on CareVP's behalf.
6. Cookies, tracking, and communications
We use cookies or browser storage for sign-in, security, site access, and preferences. Server-side logs also record requests and errors. Blocking storage may prevent sign-in or other features from working.
Where a form uses reCAPTCHA, Google receives technical information used to distinguish legitimate traffic from abuse. That processing is subject to Google's Privacy Policy and Terms of Service. Third-party sites and clients you choose may also collect information under their own policies.
We do not use third-party advertising pixels or sell or share website visitor, account, or private Customer Content information for cross-context behavioral advertising. We do not use that information for targeted advertising. Public professional information supplied as part of a licensed data service is addressed separately in Section 9; this advertising statement is not a claim that every paid data disclosure is exempt from privacy law.
Browser privacy signals. Because we do not conduct the advertising activities described above, a Global Privacy Control or Do Not Track signal does not change that practice. These signals do not disable necessary authentication, security, or request processing. Where an applicable law requires an opt-out for another disclosure or use, the methods in Section 9 are available. We honor browser opt-out signals for processing to which a legally required signal applies. A signal does not erase records or withdraw an instruction to send a requested result to your AI client.
You can unsubscribe from promotional email through its unsubscribe mechanism or contact us. We may still send necessary account, billing, security, and service notices.
7. Retention and deletion
Retention depends on the record's purpose, your organization's agreement, applicable law, and the features used. We keep information for as long as reasonably needed for these purposes:
- Inquiries and correspondence: the time needed to respond, maintain the business relationship, and document relevant communications or disputes.
- Accounts and Customer Content: the period needed to provide the service and administer the relationship, subject to an applicable agreement, valid deletion request, legal hold, or other lawful retention requirement.
- Usage, security, and evidence records: the period reasonably needed for traceability, service-quality evaluation and product improvement, billing reconciliation, abuse investigations, and legal obligations. Evidence receipts preserve the historical result served; deleting a conversation in your AI client does not delete a CareVP receipt.
- Billing and contractual records: the period required for tax, accounting, contractual, and legal obligations.
- Backups and recovery copies: the applicable backup lifecycle; deleting an active record may not immediately remove its backup copy. Retained backups remain protected and are not used for unrelated purposes.
We delete or de-identify information when it is no longer needed for these purposes, subject to applicable obligations. Request deletion using Section 9. We will explain any applicable exception or continued retention. Your AI provider and other recipients maintain their own copies under their own policies; we cannot erase those copies merely by revoking a CareVP key.
8. Security, location, and sensitive information
We use technical and organizational safeguards designed to protect information, including access controls and protections for credentials and data in transit and storage. No system can guarantee absolute security. This policy is not a claim of a particular security certification, a universal logging configuration, or a service-level guarantee. Report suspected incidents to security@carevp.com.
CareVP operates from the United States, and its hosted infrastructure is in the United States. Access by you, your chosen AI provider, or another service provider may involve other locations. We do not make a blanket promise that every external provider processes data only in the United States. Where legally required for a transfer we make, we use an applicable transfer mechanism or safeguard; contact us for information about the arrangement relevant to your service. Your access alone is not a substitute for a required legal transfer mechanism.
MCP, Data Gateway, Workspace, demo, and ordinary support surfaces are not intended for patient or resident information or PHI. Do not send medical records, patient identifiers, Social Security numbers, payment-card details, or similarly sensitive information through them. Public aggregate healthcare statistics and information about a licensed professional are distinct from a person's patient record. We do not authorize attempts to identify people from de-identified datasets.
A separately authorized PHI-processing feature requires a written agreement, a BAA where applicable, and the specified controls. That authorization does not extend to MCP or your independently chosen AI. If sensitive information is sent inadvertently, notify us without repeating it in ordinary email so we can address it. We do not assume that being a B2B service or having a BAA for one activity exempts every activity from other privacy laws.
9. Your choices and privacy rights
Depending on where you live, applicable law, and the information involved, you may have rights to access or obtain a copy of personal information, correct it, request deletion, receive a portable copy, object to or restrict processing, withdraw consent, limit certain uses of sensitive information, or opt out of sale, sharing, targeted advertising, or certain profiling. We do not use personal information to make solely automated decisions about your eligibility for employment, credit, insurance, housing, or essential services.
To make a request, email privacy@carevp.com, or write to Care Papers, Inc., Attn: Privacy, 5608 17th Ave NW, Suite 507, Seattle, WA 98107. State the request and how to reach you. You do not need to create an account. Do not send identity documents or sensitive health information unless we arrange an appropriate verification method.
We will verify identity and authority only as reasonably needed and permitted by law. An authorized agent may act for you with appropriate proof of authorization. We respond within the deadlines required by the law that applies to your request and give notice of a permitted extension. We do not charge for requests unless law allows it and we explain the basis. We will not unlawfully discriminate or retaliate for exercising privacy rights.
If we decline a request, we will explain the reason and available appeal process. You may appeal by emailing the same address with Privacy Appeal in the subject. We will respond within the applicable legal deadline. You may also contact your state attorney general or other competent privacy regulator; where applicable, we will explain how to do so with our response. People in the EEA or UK may complain to their local supervisory authority.
California disclosures. The information categories described in Section 2 include identifiers, professional or employment information, commercial information, internet or network activity, correspondence and other content you submit, and account credentials. The sources, purposes, recipients, and retention criteria are described in Sections 2–7. Credentials may be sensitive personal information; we use them for authentication and security, not to infer characteristics about you. We do not offer a financial-incentive program in exchange for personal information.
Public-source professional records. Our licensed data services may return information identifying professionals or owners. Some government records are excluded from the definition of personal information under applicable law, but not all professional information or derived information is automatically excluded. To request access, correction, deletion, or an opt-out concerning a professional record, use the contact methods above and identify the record or source. We evaluate the request under the applicable law and source obligations, including whether a paid disclosure constitutes a sale. We do not make a blanket exemption claim for the entire database. A correction in CareVP does not necessarily change the publisher's original record, and we may also direct you to that publisher.
EEA and UK information. Where applicable, we rely on performing a contract, legitimate interests in operating and securing a B2B service, legal obligations, or consent for the relevant processing. You may object to processing based on legitimate interests and withdraw consent where it is the basis, without affecting prior lawful processing. A separately signed data processing agreement addresses information we process for your organization.
10. Children
The Service is intended for adult business users, not children. We do not knowingly solicit personal information from children under 18 through accounts or forms. If you believe a child has submitted information, contact us so we can investigate and take appropriate action. This does not describe the age composition of aggregate public demographic statistics.
11. Other agreements and services
A signed data processing agreement or BAA may set additional obligations for the features it covers. Your organization's responsibilities and your rights under applicable law remain in effect. The privacy practices of your employer, your AI provider, and independent websites are governed by their own policies. Our Terms of Service explain permitted use of CareVP and its results.
12. Changes and contact
We will post changes with an updated date. For material changes affecting existing customers, we will provide at least 30 days' notice by account email or prominent in-product notice before those changes take effect, subject to applicable agreements and law. We will not use information collected under an earlier policy for materially incompatible purposes without any notice and consent required by law. This update does not itself authorize new data uses or reduce commitments in existing agreements.
Questions or requests: privacy@carevp.com. General inquiries: contact us. Mailing address: Care Papers, Inc. (d/b/a CareVP), 5608 17th Ave NW, Suite 507, Seattle, WA 98107.