Privacy Policy

1. Scope

PathwayCare LLC, a Florida limited liability company (“PathwayCare,” “we,” or “us”), provides www.pathway-care.com for general business information and inquiries. This policy explains the handling of information submitted through the website’s business inquiry form and Mia conversation feature, together with related technical records. The platform is in development and is not available for operational use.

Do not submit patient information, protected health information (PHI), other sensitive personal information, or confidential business information. These channels are not intended for clinical care, patient referrals, or emergencies. Contact emergency services directly for an emergency.

2. Information processed

The business inquiry form collects your name, organization, work email, inquiry type, any “Other inquiry type” description, and message. Mia conversations contain the free-text messages you submit and the replies you receive.

The website also records consent versions and associated timestamps, submission and conversation identifiers, message order and status, and technical hashes used to recognize sessions and prevent duplicate submissions. Basic request counts and time-window buckets help limit abuse. An available platform identifier or IP address may be processed temporarily to calculate an abuse-control bucket; the application’s rate-limit tables do not retain that raw identifier or IP address. Hosting and service providers may maintain separate technical or security logs.

3. Purposes and providers

We use inquiry and conversation records to review and respond to business questions, maintain conversations, document the notice presented at submission, prevent duplicate processing, and protect the website against abuse. PathwayCare may contact you about your inquiry.

Information is stored through OpenAI Sites and Cloudflare. PathwayCare uses ChatGPT/OpenAI to review inquiries and messages and prepare responses. Mia is an automated assistant whose replies are restricted to approved public PathwayCare information. This restriction concerns the answers Mia may provide; submitted messages are still processed for review.

When email notifications are enabled, Resend processes a generic notification and inquiry reference for PathwayCare. These notifications contain notification metadata, not the visitor-submitted name, organization, email address, inquiry type, custom inquiry description, or message. Related delivery status and attempt records are also maintained.

Inquiries and conversations are reviewed periodically. These features are not live chat, and no particular review or response time is guaranteed.

4. Conversation cookie

A Secure, HttpOnly, SameSite browser cookie associates your browser with your conversation for up to 30 days. Clearing or blocking it, using a different browser, or allowing it to expire may prevent retrieval of that conversation. Cookie or session expiry does not delete stored messages.

5. Retention and requests

The current website does not apply an automatic deletion schedule to business inquiry and conversation records. Records remain stored until PathwayCare deletes them. Cookie duration is not a records-retention period. Provider logs and backups may follow separate provider retention practices.

For privacy questions or requests concerning your information, including deletion, email info@pathway-care.com. Please provide enough non-sensitive detail to help identify the relevant inquiry or conversation. We may need to verify your connection to the information before acting. Requests will be handled subject to applicable law, including any required retention and available privacy rights. This policy does not limit rights provided by applicable law.

6. Security and updates

The website uses access controls and technical safeguards, including the conversation cookie protections described above. No website or transmission method can guarantee absolute security.

Updates to this policy will show a revised effective date. Any additional notice or consent required by applicable law will be provided. An updated policy does not override commitments or rights that applicable law requires us to honor for information already collected.