Privacy Policy

Carevelo is staffing software for foster home agencies, provided by Pelagos Digital Solutions (“we”, “us”). This policy explains what personal information we handle, why, and the choices you have.

It covers this website, the agency dashboard and the staff app. We handle personal information in line with the data protection laws that apply where we and the agencies we serve operate.

When a foster home agency uses Carevelo, the agency is responsible for the information about its staff and operations. It decides what to record and who can see it. We handle that information on the agency's behalf and only to provide the service to them.

If you work for an agency and have a question about your records, start with your agency. We will help them answer it. We are directly responsible for information about website visitors and about the people who open and manage agency accounts.

About staff (entered by the agency or the staff member)

• Name, work email, phone number, role, department, employment type and preferred contact method.
• The homes they work at, their shifts and their replies to schedule messages.
• Clock-in and clock-out times, the home, how they clocked in, and the location at that moment.
• Hours worked, pay rates and pay-period totals.
• Emergency contacts.
• Compliance records the agency chooses to keep, such as background or vulnerable-sector checks, first-aid certificates and health screening results, with any attached files.
• Messages they receive and whether they have read them, and notification device tokens.
• The date they gave consent to location checks.

About dashboard users

• Name, email, role and permissions, and when they last signed in.
• Sign-in details: a securely hashed password, an encrypted two-factor secret if enabled, or a Google account ID if they sign in with Google.

About the agency

• Agency name, country and region, home addresses and the area around each home used for location checks.
• Incident reports and updates written by staff.
• Billing details, handled by Stripe. We never see or store full card numbers.

Technical information

• For changes made in the dashboard, our audit log records who made the change, what changed, and where available the IP address and browser.
• One-time sign-in codes are stored only as a secure hash and expire after 10 minutes.

Before a staff member clocks in for the first time, the staff app asks for their consent to location checks. Clock-in won't work without it.

• Location is read only at the moment someone clocks in or out, to confirm they are at the home.
• We do not track location in the background or at any other time.
• The location is saved with that clock record and nowhere else.

Carevelo is used by agency staff, not by children, and we do not knowingly collect information from children.

Staff may mention a child in an incident report or a note. That information belongs to the agency and is protected like all other agency data. Critical incident details are emailed to the managers the agency has chosen. We ask agencies to record only what is needed.

• To run the service: schedules, clock-ins, attendance, payroll hours, messages and incident alerts.
• To sign people in securely and keep accounts safe, including rate limiting and audit logs.
• To send the emails, texts and notifications the service depends on.
• To bill agencies and manage subscriptions.
• To provide support and fix problems.
• To meet legal obligations.

We never sell personal information, and we don't use it for advertising. We share it only with the service providers below, which help us run Carevelo and receive only what they need to do their part:

Some of these providers may store or process information outside the country where you live, including in the United States, where it may be accessible to authorities under local law. We may also disclose information when the law requires it.

• Clock records and the audit log can't be edited or deleted, so attendance and payroll stay trustworthy. Mistakes are fixed by adding a correction.
• When someone leaves an agency, their profile is deactivated rather than deleted, so the agency's history stays complete.
• Agencies can delete compliance items, attachments and emergency contacts themselves.
• Sign-in codes expire after 10 minutes and password reset links after 1 hour.

We keep an agency's information while its account is open. When an agency closes its account, it can ask us to return or delete its information, and we will do so unless the law requires us to keep it.

• Each agency's data is kept separate inside the database, so one agency can't see another's.
• Passwords and sign-in codes are stored as secure hashes; two-factor secrets are encrypted.
• Information travels over encrypted (HTTPS) connections.
• Access in the dashboard is limited by role and by per-person permissions.
• Sign-in attempts are rate limited, and changes are written to a tamper-resistant audit log.
• Uploaded documents are only reachable through short-lived, signed links.

This website uses no analytics, advertising or tracking cookies.

The dashboard and staff app use a secure session cookie that keeps you signed in for up to 8 hours, and store your signed-in session and a few display preferences in your browser's local storage. These are needed for the apps to work. Signing out clears your session.

You can ask to see the personal information held about you, and ask us to correct it.

• Staff members: please contact your agency first. They control your records and can update most of them directly.
• Everyone else: email privacy@carevelo.com.

You can withdraw consent to location checks by contacting your agency, but you may then be unable to use clock-in. If you're not satisfied with our answer, you can complain to the data protection authority where you live.

If a breach of security creates a real risk of significant harm, we will tell the affected agencies and people, and report it to the relevant data protection authority, as the law requires.

We'll update this policy when our practices change and change the date at the top. If a change is significant, we'll tell agency account owners by email before it takes effect.

Our privacy officer is reachable at privacy@carevelo.com. We aim to reply within 30 days.