Legal

Privacy

Our full privacy policy is in preparation. Rather than publish placeholder legal language you might rely on, we are saying plainly that this document is not yet final. What follows describes design decisions already in force in the product, not a binding policy.

What is already true today

CareFWD is built so that patient identity is never required to find a provider. A Care Transition Query carries only non-identifiable details: care category, destination area, and insurance context, and the product actively screens submissions to keep identifiers out at entry. Identity is shared only after a placement decision, inside your own hospital’s workflow and systems.

We describe the security and privacy architecture in detail, and keep it current, on our Security & Privacy page.

Analytics on the public site

The public marketing pages (this site’s home, product and legal pages) use Google Analytics 4 to count visits. The tag is loaded only on pages a signed-out visitor can reach; it is never loaded inside the planner, Representative or admin portals, so no analytics data is ever associated with a logged-in user or a routing query. Our hosting provider, Cloudflare, also collects cookieless page-load metrics (Cloudflare Web Analytics) on every page. No analytics data is sold or used for advertising.

Error reporting

When something breaks in your browser, the application sends a short error report to Traceway, a hosted error-monitoring service, so we can find and fix the problem. A report contains the error text (with email addresses and long number sequences removed), the technical stack trace, the page path without any query string, and basic browser details such as browser type and language. We do not send session recordings, form contents, console output or network requests, and error reporting is not used for advertising.

Our servers also send operational telemetry to Traceway so we can monitor reliability and performance: for each request, the page path (without any query string), the response status and timing, the approximate location of the request (city, region and country, derived by our hosting provider), network and browser details such as the connecting network and user agent, and our servers’ log lines. Search text, filters and one-time links carried in the part of a web address after the question mark are removed before sending. We do not send visitor IP addresses or form contents to Traceway, and this telemetry is not used for advertising.

When this page changes

The binding policy will replace this page in full, including the disclosures a covered entity needs for its own compliance review. If you are evaluating CareFWD and need that documentation before it is published here, tell us and we will provide it directly. Reach us at support@care-fwd.com.