Careit Co. ("Careit," "we," "us," or "our") operates Careit websites, mobile applications, dashboards, marketplace tools, Freshcue, and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the platform.
Please read this Privacy Policy carefully. If you do not agree with this Privacy Policy, you should not use the platform.
Information We Collect
Information You Provide
We may collect information that you voluntarily provide when you register, use the platform, join an organization account, create listings, complete marketplace workflows, contact us, or otherwise interact with Careit. This may include:
- name, email address, phone number, and contact information;
- organization name, organization type, role, and account permissions;
- pickup, delivery, billing, and location information;
- account credentials and authentication information;
- listing details, photos, messages, issue reports, support requests, and documents; and
- communication preferences and other information you choose to provide.
Automatically Collected Information
When you access the platform, we may automatically collect certain device and usage information, including browser type, device type, operating system, IP address, approximate location, pages viewed, referring pages, time zone, cookie identifiers, session activity, and diagnostic information.
Payment Information
Careit does not collect or store full payment-card numbers. Marketplace and subscription payments may be handled by third-party payment processors, such as Stripe. Those processors may collect payment information, identity-verification information, bank information, tax information, and transaction records under their own terms and privacy policies.
How We Use Information
We use information to:
- provide, operate, secure, and maintain the platform;
- create and manage accounts, roles, organizations, listings, orders, pickups, deliveries, and support workflows;
- connect donors, recipients, buyers, sellers, food movers, businesses, and program partners where needed for Careit workflows;
- process transactions, refunds, billing, marketplace activity, and related communications;
- send administrative messages, security notices, policy updates, support responses, and service communications;
- monitor performance, debug issues, prevent fraud, enforce policies, and protect users and the public;
- develop, improve, and measure our products, services, reports, and impact tools; and
- comply with legal, tax, payment, safety, recall, regulatory, and contractual obligations.
How We Share Information
We may share information as needed to operate Careit and support platform workflows, including:
- With other users and organizations: Information needed to coordinate listings, donations, purchases, pickups, deliveries, issue resolution, marketplace activity, Freshcue activity, and program workflows.
- With service providers: Vendors that help us with hosting, analytics, messaging, support, payment processing, identity verification, maps, security, communications, and business operations.
- With connected tools and program partners: Integrations, reports, exports, or partner workflows that you or your organization enable or that are required for a covered program.
- For legal and safety reasons: Public-health, safety, recall, law-enforcement, regulator, court, payment-processor, fraud, abuse, or emergency requests where disclosure is allowed or required.
- For business transfers: In connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction.
Data Retention
We retain information for as long as needed to provide the platform, maintain records, resolve disputes, enforce agreements, comply with legal obligations, support safety or recall workflows, and operate our business. Retention periods may vary by account status, organization settings, contract terms, transaction history, legal requirements, and operational needs.
Your Privacy Rights
California Residents
California residents may have rights to request access to, correction of, or deletion of certain personal information, and to receive information about how personal information is collected, used, and disclosed. You may also have rights related to certain sharing or sale of personal information if applicable law defines our activity that way.
European and Other International Residents
If applicable law gives you data-protection rights, you may have the right to access, correct, update, delete, restrict, object to, or request portability of certain personal information. You may also have the right to withdraw consent where processing is based on consent.
How to Make a Request
You may contact us at hello@careit.com to make a privacy request. We may need to verify your identity and authority before responding. If your account is managed by an organization, we may direct certain requests to that organization or need to work with that organization to respond.
Cookies and Tracking Technologies
We use cookies and similar technologies to operate the platform, remember preferences, improve performance, understand usage, secure sessions, and support analytics. You can instruct your browser to refuse cookies or alert you when cookies are being sent, but some platform features may not work correctly without them.
Third-Party Services
The platform may contain links to third-party websites and may rely on third-party services. Third-party services are governed by their own terms and privacy policies. Careit is not responsible for third-party privacy practices, security practices, or content.
Google Calendar and Google Workspace API Data
Careit may offer an optional Google Calendar sync feature. If you choose to connect Google Calendar, Careit requests Google Calendar permissions through Google OAuth so Careit can create and maintain a Careit calendar and sync Careit-related donations, rescues, food runs, pickups, deliveries, and schedule changes.
Careit currently requests the Google Calendar scopes needed to create and manage Careit-created calendars and calendar-list visibility: https://www.googleapis.com/auth/calendar.app.created and https://www.googleapis.com/auth/calendar.calendarlist. We do not request Gmail, Drive, Docs, Sheets, Meet, or other Google Workspace content for this feature.
Google Calendar data Careit may access, create, store, or update includes OAuth access tokens, refresh tokens, token expiry, the Careit-created calendar ID, event titles, event descriptions, Careit links, event status, start and end times, time zones, and private Careit identifiers such as donation, rescue, or food-run IDs.
Careit uses Google Calendar data only to provide and improve the visible calendar-sync feature, keep Careit schedule information synchronized, troubleshoot the connection, protect security, comply with law, and honor your disconnect request. Careit does not sell Google Calendar data, use it for advertising, use it for retargeting or personalized ads, transfer it to data brokers, use it to determine creditworthiness or lending eligibility, or use it to train or improve artificial intelligence or machine-learning models.
Careit does not allow humans to read Google Calendar data unless you ask us to help with a specific issue, you give us permission, access is necessary for security or abuse investigation, access is required by law, or the data is aggregated or de-identified for internal operations.
Careit’s use and transfer of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You may disconnect Google Calendar sync in Careit. When sync is disconnected, Careit clears the stored Google OAuth tokens and calendar ID from the connected Careit team-user record and may delete the Careit-created Google Calendar. You may also review or revoke Careit’s Google access from your Google Account settings.
Security
We use reasonable technical and organizational measures designed to protect information. No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
Children's Privacy
The platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will update the "Last updated" date when we make changes. Your continued use of the platform after an updated Privacy Policy takes effect means you accept the updated policy.
Contact
Questions about this Privacy Policy may be sent to: