Privacy notice

Who controls your information

California recovery connect operates Cali Recovery Connect and is the data controller for personal information collected to provide this directory and its center listing service. A treatment center is responsible for information it receives and uses in its own admissions process. This directory is not an emergency or medical advice service.

Information collected and why

• Center accounts and listings: account identifiers, name, email, contact details, center location, website, program descriptions, services and accepted insurance. We use these to sign you in, manage reviewed listings, verify ownership and provide subscription features.
• Family inquiries and insurance requests: name, phone, email, selected insurance and care needs, messages, and any optional member identifier you submit. These are used to store your request and, when authorized access and delivery are available, make it available to the selected center. A general request without a selected center is stored by the directory operator. Do not submit medical records or unnecessary sensitive information.
• Billing records: payment-provider customer and subscription identifiers, selected plan, payment status and billing dates. We use these to determine whether a center is listed or Featured. Card details are collected by Paddle, not by the directory's forms.
• Technical and security information: device and browser information, IP addresses, essential session information, and error or usage logs produced by our hosting and service providers. These support operation, security, fraud prevention and troubleshooting.
• AI-assisted listing input: text a center submits and its generated draft are processed to organize listing information. Review outputs before publication; do not include patient data in listing prompts.

Legal bases and sensitive information

Where applicable law requires a legal basis, we process account and subscription information to perform our contract, technical data for legitimate interests in a secure and reliable service, and records needed to meet legal obligations. We rely on your consent where required for sharing inquiries or processing sensitive information. You may withdraw consent, without affecting processing already lawfully performed. The directory does not independently verify insurance benefits or guarantee a center will respond.

Public and private information

Reviewed center listing information is public when the listing is eligible for display. Family contact details, listing application contact details and private portal links are not part of public directory results. Owner access to real admissions contacts requires a live paid entitlement; test subscriptions do not unlock those contacts. A private portal link is a management capability: keep it confidential.

Who receives information

We use service providers for hosting, account authentication, storage, AI processing and operational support, including Lovable Cloud and its subprocessors. The selected treatment center may receive inquiries as described above. Paddle is our Merchant of Record and receives information for sales, subscription management, payment processing, tax compliance and invoicing. We may share information with professional legal or accounting advisers, and authorities when required by law. Email delivery of center inquiries is not currently enabled; saving an inquiry does not mean it has been emailed.

Opening Google Maps or a center's external website sends information to that service under its own privacy terms. An embedded map may send your IP address and browser information to Google.

Retention

Information is retained only as long as needed to provide the service, maintain account and billing history, resolve disputes and meet legal requirements. Inquiries should not be retained longer than necessary for their purpose. Information no longer needed will be deleted or anonymized, subject to lawful retention and backup cycles. An automatic inquiry deletion schedule has not yet been configured; cancellation of a subscription does not automatically delete account or inquiry records.

Your rights

Depending on applicable law, you may request access, correction, deletion, a copy of your data, restriction of processing, or object to processing, and withdraw consent where applicable. We honor rights subject to identity verification and legal exceptions. You may complain to the relevant privacy regulator. For information already provided to a treatment center, you may also need to make a request directly to that center.

Security and cookies

We use appropriate technical and organizational safeguards, including encrypted connections, restricted access and ownership checks. No system is completely secure. Essential cookies or browser storage support sign-in, sessions and private portal continuity. Hosted infrastructure may produce operational usage measurements. The app does not currently implement advertising cookies or a marketing-cookie preference system. You can manage cookies and storage in your browser; disabling essential storage can prevent sign-in or portal access.