Effective and last reviewed October 5, 2026

SeniorPath Privacy Policy

This Privacy Policy explains how SeniorPath Software LLC (“SeniorPath,” “we,” “us,” or “our”) handles information collected through seniorpath.ai, the SeniorPath web application, the Field Companion mobile application, and related family- or client-facing experiences (together, the “Services”).

This policy is a public description of our practices, not a contract that changes the responsibilities in an agency’s customer agreement. If you use SeniorPath through a placement agency, that agency may be the organization deciding why your information is collected and how it is shared. In that situation, direct privacy requests to the agency first; we will help it respond where appropriate.

Connecting Google? Read how SeniorPath accesses, uses, stores, and shares Google account, Gmail, and Calendar data, including AI processing and how to disconnect or request deletion.

1. Information this policy covers

This policy applies to information we process as a service provider for customer agencies and to information we collect for our own website, account, security, and business purposes. It does not replace an agency’s own privacy notice, a facility’s privacy notice, or a family’s agreement with a care provider.

Our Terms of Service explain the rules for using SeniorPath. We may provide additional notices at the point of collection; those notices supplement this policy if they describe a particular feature more specifically.

2. Information you provide to us

Depending on how you interact with SeniorPath, we may receive:

Marketing and contact information: your name, work email, agency or company name, agency size, states of operation, phone number if you choose to provide it, and the message or scheduling details you submit through a form.
Account information: your name, email address, organization, role, authentication details, and preferences needed to provision and secure an account.
Agency workflow content: intake details, client and resident profiles, family and decision-maker information, care preferences, assessments, facility matches, tours, referrals, partner and contact records, notes, tasks, compliance evidence, fee and placement records, and other content an agency chooses to enter or connect.
Communications: email addresses, message content, attachments, delivery events, replies, call or meeting notes, and other communications an agency asks SeniorPath to organize or send.
Mobile and location information: device information and, when a user enables the relevant Field Companion feature, location or visit information needed for a field workflow. Device permission controls and feature context determine whether location is collected.
Payment information: subscription and agency-invoice billing contacts, transaction and application-fee amounts, invoice status, payment-method category, provider references, payouts, refunds, disputes, and reconciliation events. Stripe processes full card and bank credentials; SeniorPath does not need to receive or store full card or bank-account numbers.

Please do not put unnecessary medical, financial-account, government-identification, or other highly sensitive information into a contact form. Customer agencies decide what information to place in their workspace and are responsible for giving people any notices and obtaining any permissions their workflows require.

3. Information collected automatically

We may collect log, device, browser, approximate network, diagnostic, and usage information when you visit seniorpath.ai or use the Services. This can include pages viewed, referring pages, timestamps, feature interactions, error information, and identifiers used to keep a session secure. We use this information to operate, protect, troubleshoot, measure, and improve the Services.

SeniorPath and service providers may use cookies, local storage, pixels, or similar technologies for essential operation, preferences, security, and analytics where enabled. Browser settings can limit cookies, although doing so may affect site or product functionality. We do not add advertising cookies merely because a browser visits this page; any analytics tool that is enabled is used according to its configuration and applicable provider terms.

On the public site, optional custom interaction measurements are currently disabled pending a privacy review of the analytics transport. If later enabled with a working consent control, these would record limited categories such as help-search result ranges and confirmed form outcomes, not search terms, answers, names, email addresses, or message contents. This preference does not control automatic pageviews from hosting analytics if that service is enabled in Publishing settings; browser controls may also limit analytics. We do not treat a form submission as consent to optional measurement.

4. Information from integrations

If an agency or user connects an integration, SeniorPath may receive the information needed to provide the requested workflow, subject to the permissions granted:

Clerk: authentication and account identity information used to sign users in and manage access.
Google Gmail and Calendar: authorized account identity, email messages and correspondence details, and calendar events used for communications, follow-up, and scheduling. The Google-specific disclosures below describe these uses and your controls; connecting Gmail does not grant access to your Google Contacts address book.
Google Places and Maps: facility search, place, map, address, rating, and related directory information requested for facility research and matching. Google’s terms and privacy practices also apply to its services.
Stripe and QuickBooks Online: when enabled by an agency, payment, connected-account, invoice, customer, mapping, accounting, refund, dispute, payout, and synchronization information needed to collect and reconcile agency-issued invoices. The agency is the merchant of record and controls its provider accounts.

An integration may have its own retention, access, or deletion behavior. Disconnecting an integration stops future access but may not delete information already copied into an agency workspace or included in a sent communication.

4A. Google account, Gmail, and Google Calendar data

SeniorPath Software LLC uses Google integrations to provide visible communication and scheduling features in SeniorPath. Connections are optional. Google asks you to authorize the requested permissions; Google sign-in alone is not authorization to read your mailbox or manage your calendar. We do not ask for your Google password.

What we access and why

Account identity and authorization: your connected email address, Google account identifiers, granted permissions, and authorization tokens let us identify the connected account and perform authorized actions. Google sign-in may also provide your name and profile image through our authentication provider, Clerk.
Gmail reading: the Gmail read-only permission allows access to message and thread identifiers, senders and recipients, subjects, dates, labels, snippets, and message bodies. We use relevant correspondence to display conversations, detect replies, link communications to agency records, and support follow-up and enabled workflow features. This permission is broader than a single thread; relevant messages may be synchronized in the background while connected. Message content can contain personal or sensitive information.
Gmail sending: the Gmail send permission lets SeniorPath send messages and replies from your connected account when you use sending features or authorize a scheduled workflow. This includes recipients, reviewed message content, and attachments you choose to send. These permissions do not grant SeniorPath permission to delete your Gmail messages or change their read status.
Google Calendar: authorized calendar access lets us identify your connected calendar and read event identifiers, titles, descriptions, locations, start/end times, time zones, attendees, and status. We use event data to display and synchronize scheduling information, including tours and meetings. Event-management permission allows SeniorPath to create, update, or remove linked events as part of your scheduling actions. Event invitations and updates may disclose the event details to attendees through Google Calendar.

Storage and protection

SeniorPath stores connection metadata and the message, event, and synchronization records needed for these features in its hosted application database. Content saved into a case or communication history becomes part of that agency’s workspace. Mailbox refresh tokens are encrypted before storage. Calendar authorization is obtained through the connected member’s authentication account. Access to application records is controlled by agency membership, user permissions, and server-side authorization checks. We use HTTPS for communications with Google and the public service, and restrict credential access to the services that need it. No security measure eliminates every risk.

Sharing and AI-assisted processing

Google data is not public simply because an account is connected. Authorized agency users may see correspondence and scheduling information made part of their workspace, according to their permissions. Messages and invitations are shared with the recipients selected for the workflow. Hosting, database, authentication, and processing providers handle the data needed to operate these features on our behalf; they do not receive permission to use it for unrelated purposes.

When you request an AI-assisted feature or enable a disclosed AI workflow, relevant message content, selected conversation context, or scheduling information may be processed by OpenAI through our service infrastructure to return a draft, summary, classification, or workflow suggestion. These outputs may be saved in your workspace. Connecting an account is not permission to train a general-purpose AI model on your mailbox. Review AI-generated content before relying on it or sending it.

Google API Services User Data Policy and Limited Use

SeniorPath’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. These restrictions also apply to data derived from Google user data and take precedence over broader descriptions elsewhere in this policy.

We use Google user data only to provide or improve the user-facing features described here. We do not sell it or use or transfer it for advertising, retargeting, data brokerage, creditworthiness, or lending decisions.
Google Workspace APIs and data obtained through them are not used to develop, improve, or train non-personalized or general-purpose AI or machine-learning models. We do not permit service providers to use this data for those purposes.
Transfers are limited to providing or improving the disclosed user-facing features with your consent, security purposes, legal compliance, or a merger, acquisition, or sale of assets after obtaining your explicit prior consent.
Our personnel and service providers may not read Google user data unless you affirmatively agree to access to specific data, access is necessary for security purposes or legal compliance, or the data is aggregated and used for internal operations as permitted by Google’s Limited Use requirements and applicable law.

Disconnecting, retention, and deletion

You can disconnect your mailbox using SeniorPath’s connection controls and revoke Google access at any time in your Google Account’s third-party connections. Revoking access prevents further authorized Google API access; features that depend on that connection will stop working or require reconnection. A mailbox disconnect removes the locally stored mailbox refresh credential and attempts provider revocation. Use Google’s controls to confirm or revoke remaining access.

Disconnecting does not automatically erase messages, event references, AI outputs, or records already saved in SeniorPath, delete your original Gmail messages or Google Calendar events, or recall information already delivered to recipients. We retain saved Google-derived records only as needed to provide the authorized features and meet applicable security, legal, or recordkeeping obligations. Backups and legally retained records may remain until their applicable retention period ends; retained data remains subject to the protections and Limited Use restrictions above.

To request access, correction, or deletion of stored Google account data, contact hello@seniorpath.ai and identify your connected account and agency without sending passwords, tokens, or message contents. For agency-controlled records, contact your agency administrator as well. We verify the request, coordinate with the agency where necessary, and explain any applicable retention restrictions. Deleting SeniorPath copies does not delete copies held by Google or recipients.

If we change how we access or use Google user data, we will update this policy, provide notice, and obtain any additional consent required before using that data for a new purpose.

5. How we use information

We use information for the following purposes:

provide, maintain, personalize, and support the Services;
authenticate users, manage agency access, and prevent unauthorized activity;
organize placement work such as intake, matching, tours, referrals, outreach, and compliance workflows;
send messages, reminders, notifications, and service communications requested by an agency or user;
process subscriptions, invoices, trials, renewals, and payment-related support;
calculate disclosed SeniorPath application fees and reconcile agency invoice payments, refunds, disputes, payouts, and optional QuickBooks Online postings;
monitor reliability, investigate abuse or security events, and diagnose errors;
respond to contact requests, support requests, and other inquiries;
understand aggregate product usage and improve features, documentation, and safety; and
comply with law, enforce agreements, and protect the rights, safety, and property of SeniorPath, customers, and others.

6. AI-assisted features

SeniorPath may offer optional AI-assisted drafting, summarization, classification, or workflow suggestions. When a user requests an AI feature, relevant prompts, instructions, and customer-provided context may be sent to OpenAI through our configured service connection so that OpenAI can return the requested output.

AI output is generated assistance, not a record of fact or professional advice. We do not promise zero retention by an AI provider. Provider processing is governed by the applicable agreement, product configuration, and provider terms. Google user data is additionally subject to the stricter Limited Use and no-general-purpose-model-training commitments in section 4A; this section does not authorize a conflicting use. Agencies should review outputs, remove unnecessary sensitive details, and choose whether and how to use them.

7. Sensitive and health-related information

SeniorPath is designed for senior placement operations, which may involve care preferences, diagnoses, medications, functional needs, or other information that a person may consider health information. We treat this information conservatively: agencies should collect and share only what is needed, use appropriate permissions, and follow the laws and agreements that apply to their work.

SeniorPath does not claim that the Services are HIPAA compliant, that every customer is a covered entity or business associate, or that use of SeniorPath satisfies any health-privacy obligation. Whether HIPAA or another health-information rule applies depends on the parties, services, and facts. This treatment is expressly subject to attorney review and may be updated as that review and customer agreements develop.

8. How we share information

We may disclose information:

to customer agencies and people they authorize, including family or client-facing recipients selected by the agency;
to vendors that host, authenticate, analyze, secure, communicate through, or otherwise support the Services, including Clerk, Google, Stripe, OpenAI, and analytics providers when enabled;
when a user asks us to send or connect information through Gmail, Calendar, Maps, Places, or another enabled integration;
to comply with a legal obligation, court order, or valid government request, or to investigate fraud, abuse, or a security incident; and
in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate protections.

We do not sell personal information for money. We do not use customer workspace content to create a public directory of people or to independently market care services. Customer agencies control their own disclosures, and a recipient may have additional privacy terms that apply to information it receives.

Before enabling agency invoice payments, the owner and qualified counsel should review the agency’s customer privacy notice, payment and refund disclosures, Stripe and QuickBooks data sharing, retention, and any state-specific referral-fee timing or disclosure requirements.

9. Retention

We retain information for as long as reasonably needed for the purpose collected, including to provide an active account, support a customer relationship, preserve security and audit records, resolve disputes, meet legal obligations, and enforce agreements. Customer agencies control much of the workspace content and should use available product controls and their own retention policies to decide what to keep.

We do not promise a single retention period for every category. After information is no longer needed, we may delete it, de-identify it, or keep limited copies where required for backup, security, fraud prevention, legal, or accounting purposes. Third-party integrations and recipients may retain copies under their own policies.

10. Security

We use administrative, technical, and organizational measures intended to protect information from unauthorized access, loss, misuse, or alteration. No website, application, transmission, or storage system is completely secure. Users and agencies must protect credentials, use appropriate access permissions, and promptly tell us about suspected account or security issues.

Our public security practices and product boundaries are described on the Trust & security page. That page is informational and does not create a security certification or service-level promise.

11. Your choices and privacy rights

You may choose not to submit a contact request or optional information. You can opt out of non-essential marketing messages by using an unsubscribe control or contacting us. Service and account messages may still be sent when necessary to provide the Services.

Depending on where you live and your relationship with the data, you may have rights to request access, correction, deletion, restriction, portability, or information about processing. Customer-workspace requests should normally go to the agency that controls the workspace. We may need to verify a request and may not be able to honor it when doing so would conflict with law, another person’s rights, an agency’s instructions, security, or a legal recordkeeping need.

For a SeniorPath marketing or account privacy request, contact hello@seniorpath.ai. We will route requests to the appropriate customer or service team where needed.

12. Children

The Services are intended for professional agency users and the adults involved in placement decisions. SeniorPath does not knowingly collect personal information directly from children through the public site. If you believe a child has submitted information to us, contact hello@seniorpath.ai.

13. International use

SeniorPath is operated from the United States. Information may be processed in the United States or other locations where SeniorPath or its service providers operate. If you use the Services from another country, you are responsible for confirming that your use and transfer of information are permitted by applicable law.

14. Changes to this Privacy Policy

We may update this policy as the Services or legal requirements change. We will post the updated version at seniorpath.ai/privacy and change the effective date. If a change is material, we may provide additional notice through the Services or another reasonable channel.

15. Contact SeniorPath

SeniorPath Software LLC is an Arizona limited liability company. For privacy or legal questions about this policy, contact hello@seniorpath.ai. Please do not include sensitive client or health information in an initial email.

See the Terms of Service for the agreement governing use of SeniorPath.