Privacy Policy

1. Who We Are

FindABed is operated by Symbiotech AI LLC, located in Howell, Michigan. We run a care placement marketplace that connects social workers and discharge planners with licensed care facilities across Michigan. Contact us at austin@symbiotechai.com.

2. Information We Collect

• Account information: Name, email address, organization, professional role, and hashed password credentials.
• Provider profile data: Facility name, address, phone number, website, care types, insurance accepted, pricing, and bed availability.
• Search and usage data: County and care-type filter selections, search queries, pages viewed, and feature interactions — used to improve the platform and not sold to third parties.
• Placement records: Referral submissions, status updates, and discharge dates associated with your account to power the placement workflow.
• Communication preferences: SMS and email opt-in status, notification frequency, and unsubscribe history.

3. How We Use Your Information

• To authenticate your account and provide access to platform features.
• To match social workers with available care beds based on county, care type, insurance, and availability.
• To send referral notifications to providers and status updates to social workers.
• To process placement fees via Stripe.
• To send optional newsletters and product updates with unsubscribe included in every email.
• To improve search relevance, platform reliability, and user experience.

We do not sell personal information to third parties.

4. HIPAA — Protected Health Information

Symbiotech AI LLC operates as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA) when social workers use FindABed to manage client placement records.

• We handle Protected Health Information (PHI) in accordance with 45 CFR Part 164, Subpart E (Privacy Rule) and Subpart C (Security Rule).
• Treatment coordination uses are permitted under 45 CFR 164.506 (Treatment, Payment, and Health Care Operations).
• We apply the minimum necessary standard: we only access, use, or disclose PHI to the extent required to fulfill the purpose of the request.
• Client records are accessible only to the social worker who created them and to providers who receive a direct referral. Providers see only the information needed to assess placement fit — never the full client record.
• Social workers may request deletion of all client records at any time by emailing austin@symbiotechai.com. Deletion is processed within 30 days.
• Data at rest is encrypted (AES-256 via Supabase). Data in transit is encrypted via TLS 1.2 or higher.

This section is a summary, not legal advice. Consult a qualified HIPAA attorney to assess your organization's specific compliance obligations.

5. SMS Communications

FindABed uses Twilio to deliver SMS notifications. By opting in, you agree to receive text messages related to bed availability alerts, referral status updates, and placement confirmations.

• SMS opt-in is entirely voluntary and not required to use FindABed.
• To opt out at any time, reply STOP to any message from us, or disable SMS in your account settings under Alerts.
• Message and data rates may apply depending on your mobile carrier.
• We do not share your phone number with third parties for marketing purposes.

6. Email Communications

FindABed uses Resend to send transactional and marketing emails.

• Transactional emails — referral notifications, password reset, placement confirmations — are sent as part of normal platform operation. You cannot opt out of transactional emails while your account is active.
• Newsletter and digest emails — weekly bed availability summaries, product updates, and sponsor spotlights — require explicit opt-in. You can unsubscribe at any time using the link included in every newsletter.
• We do not share your email address with newsletter sponsors or advertisers.

7. Cookies and Tracking

FindABed uses session cookies required for authentication (via Supabase). We do not use third-party advertising cookies or cross-site tracking. We may use anonymized aggregate analytics to understand platform usage.

8. Data Retention and Deletion

• Account data is retained for as long as your account is active.
• Placement records are retained for 24 months after a case is closed, then purged, unless a longer retention period is required by applicable law.
• To delete your account and all associated data, email austin@symbiotechai.com with subject "Account Deletion Request." Requests are processed within 30 days.

9. Third-Party Services

• Supabase — database and authentication hosting
• Vercel — application hosting and content delivery
• Mapbox — map rendering and geocoding
• Stripe — payment processing
• Twilio — SMS delivery
• Resend — transactional and newsletter email delivery

Each service operates under its own privacy policy. We share only the minimum data necessary with each provider to deliver its function.

10. Contact