Who we are and what this policy covers

CareSwift provides the careswift.com website for CareSwift for Agencies. In this policy, "CareSwift," "we," "us," and "our" refer to CareSwift, Inc., 8 The Green, Ste B, Dover, DE 19901.

This policy explains how we collect, use, and handle information when you:

• Visit careswift.com.
• Use the website's demo booking flow.
• Contact us about the website or a demo.
• Interact with first-party website analytics.

This policy applies only to the public website and its demo booking flow. It does not govern information handled within an agency deployment of the CareSwift product. Product data practices and binding obligations are addressed through the applicable agreements and the Security, Data, and AI Practices page.

Information we collect

Information you provide when booking a demo

The standard demo booking flow collects:

• The name of the person attending.
• The email address that should receive the invitation.
• The agency or organization.

If you request an alternate time, the booking flow may also collect your time zone and preferred time of day (morning, afternoon, or evening).

We use the booking information you submit to schedule and prepare for the demo and follow up about CareSwift. We do not retain partially completed booking forms as abandoned sales leads.

Do not include patient information, incident details, or report content in a booking form or ordinary email.

Information you provide by email

If you email us, we receive the information included in your message and the information needed to respond, such as your email address.

Please do not send PHI, report content, or other sensitive patient information to contact@careswift.com. If protected information is required for an authorized review, CareSwift will provide a secure process.

Information collected through website analytics

We use first-party analytics with a small, fixed set of events. Analytics may include non-sensitive context, such as the site host, source domain, source path, product intent, and a non-identifying campaign identifier.

Where needed for deduplication or reconciliation, analytics may use an opaque reference that cannot be derived into your name, email address, agency, meeting time, meeting details, or secure authority.

Ordinary analytics payloads do not include:

• Names or email addresses.
• Agency names.
• Form field values or free text.
• Selected dates, times, or time zones.
• Meeting URLs or meeting details.
• Provider adoption details.
• Patient, incident, or report information.
• PHI.
• Status references.
• Secure tokens.
• Raw error text.
• Identity derived from an IP address.

Names, email addresses, agency names, meeting details, provider adoption information, patient, incident, or report information, PHI, status references, and secure tokens also must not appear in public URL paths, query strings, fragments, confirmation redirects, or prefill parameters. The same information is kept out of ordinary application logs, referrers, replay tools, marketing tools, advertising audiences, and social preview personalization.

We collect no additional technical information through the website itself, subject to the same privacy limits described above. Our hosting infrastructure produces standard server and content-delivery logs, described in the Sharing section below.

How we use information

We use website information for the following purposes:

• To provide and operate the public website.
• To show demo availability and manage demo booking requests.
• To schedule and prepare for a demo.
• To send and manage demo invitations and related booking communications.
• To respond to website, demo, security, or evidence questions.
• To diagnose website and booking-flow performance using limited first-party analytics.
• To prevent duplicate analytics events and reconcile permitted booking states through opaque references.
• For no purposes beyond those listed above.

The applicable legal bases or other legal grounds for these uses are the grounds available under applicable United States federal and state law for operating and securing the website, scheduling and holding requested demos, responding to communications, and carrying out the other uses described in this policy.

We do not use partially completed booking forms for abandoned-form follow-up. We do not add booking information to advertising audiences or combine the booking flow with newsletter consent.

Analytics

Our analytics use only the following event names:

1. agency_booking_cta_selected
2. agency_scheduler_loaded
3. agency_slot_selected
4. agency_booking_details_started
5. agency_booking_completed
6. agency_booking_failed
7. agency_alternate_time_requested
8. agency_booking_rescheduled
9. agency_booking_canceled
10. agency_meeting_held
11. agency_meeting_no_show

These events have narrow purposes and limited properties. For example, selecting a time does not record the selected date, time, or time zone. Starting the booking details step does not record field names, field values, email domains, or agency information.

A booking completion event is recorded only after the scheduling system confirms that the meeting was created. A page view, redirect, or confirmation page display is not treated as booking authority.

Repeated page loads, refreshes, retries, or duplicate scheduling-system notifications do not cause the same event to be counted twice. Internal test traffic is identified and excluded from our reporting.

We retain website analytics for 14 months. Additional information about the analytics system, access controls, and deletion process is provided in this policy and is available on request to legal@careswift.com.

Cookies and local storage

The website uses no cookies, localStorage, sessionStorage, indexedDB, or similar browser-storage technologies. This page and the Website Terms page use browser history state only for non-personal page navigation. Their names, purposes, duration, and classification are not applicable because the website sets no cookies and uses no browser-storage technologies.

Your available controls for cookies or local storage are your browser settings, and no separate website control is currently needed because the website sets no cookies and uses no browser storage.

Public pages load fonts, scripts, icons, and other website assets from CareSwift-controlled sources. Public pages do not load third-party analytics or tag scripts, externally hosted fonts, or CDN-hosted site assets.

Sharing

We disclose website information to service providers acting on CareSwift's behalf only for operating and securing the website, scheduling and holding demos, and responding to email.

The service providers involved in the website and demo booking flow, and the information each receives, are AWS for website hosting, including standard server and content-delivery logs; Cal.com for demo scheduling, which receives the booking information described in this policy; and Zoom for demo meetings, which receives the information needed to hold the meeting. We update this list if the service providers involved in the website or demo booking flow change.

Our practices concerning the sale, sharing, or use of personal information for targeted advertising are that CareSwift does not sell or share website personal information and does not use it for targeted advertising.

Any legally required disclosures, corporate transactions, or other disclosure circumstances are governed by the requirements and permissions of applicable United States law.

Any transfers of website information across national or regional borders, including the safeguards used for those transfers, are described in the statement that CareSwift's website operations and data processing are in the United States and website information is not transferred internationally.

Retention

We retain completed demo booking information for 24 months.

We retain email correspondence for 24 months.

We retain other website information for 24 months.

Any exceptions, including legal, security, dispute, or recordkeeping requirements, are limited to applicable legal holds. CareSwift deletes information after verifying a deletion request, subject to any applicable legal hold.

Partially completed public booking forms are not retained as abandoned sales leads.

Your choices and rights

You may choose not to submit a demo booking request or contact us by email. If you do not provide information required to create a booking, we cannot schedule the demo through the booking flow.

Depending on where you live, you may have the privacy rights provided by applicable United States federal and state law.

Instructions for exercising those rights, including any identity verification, authorized agent, appeal, or non-discrimination process, are to submit a request by email to legal@careswift.com. CareSwift verifies the requester's identity before taking action.

Applicable response periods and exceptions are those required by applicable law, with identity verification completed before action is taken.

You can contact us about a privacy request at legal@careswift.com.

Your cookie or local storage choices are described in your browser settings, and no separate website control is currently needed because the website sets no cookies and uses no browser storage.

Agency deployments and PHI

This Website Privacy Policy does not govern information processed within an agency deployment of CareSwift.

Product data practices are addressed through the applicable agreements and the Security, Data, and AI Practices page. The applicable agreements govern the binding obligations for an agency deployment.

Do not send patient information, incident details, report content, or other PHI through public website forms or ordinary email.

Changes to this policy

The effective date of this policy is July 21, 2026.

We will describe how changes are communicated and when they take effect through posting the revised policy on this page with an updated effective date; material changes will also be noted on this page. The prior-version availability and archive process is making prior versions available on request to legal@careswift.com.

Contact

For questions about this Website Privacy Policy, contact:

CareSwift, Inc., 8 The Green, Ste B, Dover, DE 19901

Email: legal@careswift.com

For general website, demo, security, or evidence questions, email contact@careswift.com. Do not include PHI, report content, or other sensitive patient information in your message.

Scope and acceptance

These Website Terms apply only to your use of the public CareSwift website and its demo booking flow. They do not govern your agency's use of CareSwift for Agencies.

These Website Terms apply through a notice-based mechanism: the Terms are posted with an effective date, and use of the site on or after that date is subject to the Terms. No pageview, link activation, scroll, or return action is treated as consent or as an acceptance action.

Permitted use of the site

The public website provides information about CareSwift for Agencies and lets you book a 20-minute demo.

The rules for accessing and using the website are: You may access and use the public website and demo booking flow for lawful purposes, including learning about CareSwift for Agencies and requesting a 20-minute demo.

The rules for prohibited conduct, automated access, interference, misuse, and enforcement are: You may not scrape or use automated means to access the website, interfere with its operation or security, misuse the website or demo booking flow, or use either in violation of applicable law.

Intellectual property

CareSwift, Inc. owns the website content and the CareSwift names and marks. Use of the website does not transfer ownership, and the content and marks may be used only as permitted by CareSwift, Inc. or applicable law.

Demo booking

You can use the website to book a 20-minute demo.

Selecting a time or submitting booking information does not confirm a meeting. A meeting is confirmed only when the scheduling system confirms that it was created.

A request to reschedule or cancel a demo does not itself change or cancel the meeting. A reschedule or cancellation takes effect only when the scheduling system authoritatively confirms the change.

Do not include patient information, incident details, or report content in the booking flow.

Informational content disclaimer

The public website provides informational content about CareSwift for Agencies.

Website content is provided for general informational purposes only and is not legal, medical, or clinical advice. Seek advice from an appropriately qualified professional for your circumstances.

Third-party links

The website may link to an external scheduling page or to CareSwift's Vanta-hosted Trust Center.

Third-party links are provided for convenience. CareSwift does not endorse third-party sites and is not responsible for their content, availability, terms, or privacy practices.

Disclaimers and liability

To the extent permitted by applicable law, the public website and demo booking flow are provided "as is" and "as available," without express or implied warranties.

To the extent permitted by applicable law, CareSwift, Inc. is not liable for indirect, incidental, special, consequential, or punitive damages arising from the public website or demo booking flow.

To the extent permitted by applicable law, CareSwift, Inc.'s aggregate liability arising from the public website or demo booking flow will not exceed the amount, if any, paid to CareSwift for the website use giving rise to the claim.

Nothing in the disclaimer, liability limitation, or cap excludes or limits liability or rights to the extent that applicable law does not permit the exclusion or limitation.

Agency agreements

These Website Terms do not govern an agency's use of CareSwift for Agencies. The applicable agreement and BAA govern the binding obligations for an agency deployment.

For a summary of product-specific practices and links for security review, visit the Security, Data, and AI Practices page. That page is informational. The applicable agreement and BAA remain the source of binding obligations for an agency deployment.

Changes to these terms

Changes to these Website Terms will be posted on this page with an updated effective date, and material changes will be noted on this page.

These Website Terms take effect on July 21, 2026.

Contact

For questions about these Website Terms, email contact@careswift.com.

Do not send PHI, report content, or other sensitive patient information by email.