1. Introduction
ResourceCareConnect ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, and protect information when you use our platform at resourcecareconnect.app. By creating an account, you acknowledge that you have read and agree to this Privacy Policy. If you do not agree, please do not use the Service.
2. Information We Collect
We collect information you provide directly, including: your name, email address, and account credentials; children's profiles including names, dates of birth, placement dates, and case identifiers you choose to enter; observations, medication records, calendar events, training credits, and contact information you create; reimbursement records including child care invoices and mileage logs; placement documents and provider certificates you upload for storage; and account settings and preferences.
3. How We Use Your Information
We use your information to provide, maintain, and improve the ResourceCareConnect service; store your records and generate reports on your behalf; process payments; send transactional emails; provide customer support; and operate optional AI-assisted features as described in Section 8. We do not use your data for advertising purposes. We do not sell, rent, or share your personal information with third parties for marketing purposes.
4. Sensitivity of Foster Care Data
ResourceCareConnect is designed to store sensitive information about children in foster and kinship care. This includes information that may be subject to confidentiality protections under Oregon law, including ORS 409.225 and ORS 418.648. You are responsible for complying with your legal obligations regarding the confidential information you enter into the platform. Oregon law requires that confidential information received in connection with a foster care placement be kept confidential and used only to promote the health and welfare of the child.
5. Data Storage & Security
Your data is stored on secure, encrypted servers. Our security practices include: encryption in transit (all data uses TLS/HTTPS); encryption at rest; access controls strictly scoped to your household; secure file storage with time-limited signed URLs; secure session management; and audit logging of significant account actions. A full description of our security practices and third-party infrastructure providers is available at resourcecareconnect.app/security.
6. Data Sharing
We share data only with trusted third-party service providers necessary to operate the Service, including providers for payment processing, file storage, email delivery, and AI-assisted features. These providers are contractually required to protect your data and are prohibited from using it for their own purposes. A current list of our third-party data processors is maintained at resourcecareconnect.app/security. We do not sell your data. We do not share your data with DHS, caseworkers, courts, or government agencies unless required by law. Authorized ResourceCC staff may access account records solely for the purpose of providing technical support, and only when necessary to resolve a support request.
7. Children's Information
ResourceCareConnect is designed for use by adult foster and kinship caregivers. We do not collect information directly from children. Information about children in care is stored with the highest level of access control, scoped exclusively to the household that entered it, and never shared with third parties except as described in Sections 6 and 8.
8. Artificial Intelligence and Automated Processing
ResourceCareConnect offers optional AI features for observation tone coaching, text quick capture, and voice note structuring. These features use a third-party AI provider. Document and image scanning is temporarily unavailable while we rebuild it so child information is not sent to a third-party AI service. You can still upload documents for storage without AI scanning.
Text and voice note structuring: When you use AI on text you've written, our servers replace registered children's names, stored nicknames, dates of birth and identifiers, stored bio-parent contact names, and recognizable phone numbers and addresses before sending text to an AI provider. This can miss unregistered nicknames, unusual address formats, schools, places, and other identifying details. Leave out anything you don't want processed. Device dictation happens before this server-side text replacement.
Device dictation: ResourceCareConnect does not record or transcribe audio. If you use keyboard or OS dictation, your device's speech service handles the audio; ResourceCareConnect receives the resulting text when you submit it.
You can turn off server-side AI features in Account Settings. That setting does not control your device's dictation service. AI providers are contractually prohibited from training their models on your data.
9. Data Retention
Requesting account deletion marks your account deleted and starts a 30-day recovery window. You can request recovery during that window at resourcecareconnect.app/recover-account. The request itself does not remove your records during those 30 days. After the 30-day recovery window, we delete your account. A household that still holds children's records is not deleted at this stage. In some cases a linked record delays deletion; if that happens, deletion completes once the issue is resolved. You can email support@resourcecareconnect.app to ask about the status of a deletion request. If other members remain in the household, deleting your account ends your access only; the household and its records remain available to them.
Separately, if a household's subscription remains expired or canceled, the retention process schedules household deletion for one calendar year after the subscription period or trial ends, when that date is available. We attempt to email notices around 30 days, 7 days, and 24 hours before the scheduled date. Restoring an active subscription before deletion prevents that purge. After that date, the retention process deletes the household and its records, including children's records, and removes stored photos and documents. A failure to remove a stored file is retried. Today we cannot guarantee that a child's records are preserved when a household is deleted. We are building that, and will update this policy when it ships.
Deleted items in the Recycle Bin expire after 30 days. Copies of deleted data may persist in backups until backup retention periods elapse.
10. Your Rights
You have the right to access, correct, export, and delete your personal data through your account settings. We will respond to requests sent to support@resourcecareconnect.app within 30 days.
11. Data Breach Notification
In the event of a data breach affecting your personal information, we will assess the scope within 72 hours of discovery; notify affected users by email within 30 days of confirmed breach as required by Oregon ORS 646A.600–646A.628; notify the Oregon Attorney General if more than 250 Oregon residents are affected; and provide clear information about what data was affected and recommended protective steps.
12. Cookies & Tracking
We use essential cookies to maintain your session and provide core functionality. We do not use third-party advertising cookies or tracking pixels. We collect anonymous visit statistics, like which pages are viewed and how visitors found us, to improve the site. When you create an account, we record how you arrived (for example, a partner link or search) so we know which resources help families find us. We never collect information about children through these tools.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through a notice within the Service. Continued use after a material change constitutes acceptance of the updated policy.
14. Contact Information
Questions or concerns: support@resourcecareconnect.app. We aim to respond within 48 hours.