CareJunction

Privacy Policy

Last updated: April 16, 2026

The Short Version

The full policy below is the binding document. Here are key points for your convenience:

  • We don't process client data. Never put survivor or client information into CareJunction.
  • We don't sell your data.
  • We analyze usage, including how and when you use the system, in order to improve the Service.
  • Third-party vendors (web hosts, database hosts, analytics providers) process data on our behalf under data processing agreements.
  • We may partner with trusted academic or government agencies to better understand how to provide community care, and we may share your data with them.
  • You can request deletion of your data at any time: navigator@carejunction.org.

CareJunction is a project of the Tri-County Human Trafficking Task Force ("the Task Force"), a multi-agency coalition serving Berkeley, Charleston, and Dorchester Counties in South Carolina. References to "we," "us," or "our" in this policy refer to the Task Force. This Privacy Policy explains how we collect, use, and protect information in connection with the CareJunction web portal (the "Service").

This Service is invite-only and restricted to approved referrers — professionals such as caseworkers, healthcare workers, and school staff — who have been vetted and granted access.

1. What We Collect

Account and profile information

When an account is created for you, we store your name, email address, organization, and professional role. This information is provided either by you or by the administrator who invited you.

Usage data

We collect information about how you use the Service, including pages visited, features used, provider records viewed, and timestamps of activity. This data is collected using PostHog analytics.

Referral activity

If the Service is used to log or record referral activity, we may store metadata associated with that activity — such as the referring user, the provider selected, and the date and time of the referral. We do not collect or store personal information about the individuals being referred (see Section 3).

Technical data

We collect standard server logs and technical information necessary to operate the Service, including IP addresses, browser type, and session identifiers.

2. How We Use Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Verify and manage access for approved referrers
  • Monitor and enforce appropriate use of the Service
  • Analyze usage patterns in aggregate to improve the Service and inform research into how people access care
  • Support academic, public health, or social services research conducted by the Task Force or trusted partner organizations, using de-identified or aggregated data only
  • Comply with applicable legal obligations

We do not sell, rent, or trade any user data to third parties for commercial purposes. Data is never used for advertising.

3. What We Do Not Collect — and Your Responsibilities

CareJunction is designed to help referrers identify housing providers. It is not designed to store personal information about survivors, clients, or any individuals being referred.

You must not enter personal information about survivors, clients, or any third parties into the Service.

This includes names, contact information, case details, health information, immigration status, or any other identifying information about individuals you serve.

We disclaim all liability for any personal information about third parties that users submit to the Service in violation of this policy. If you become aware that such information has been submitted, contact us immediately at navigator@carejunction.org.

Users of this Service are responsible for complying with all applicable professional and legal obligations governing the handling of client data, including but not limited to HIPAA, applicable state privacy laws, and professional codes of conduct.

4. Sharing and Disclosure

We do not sell or share your personal information for commercial purposes. We may share information in the following limited circumstances:

Service vendors.

We use third-party vendors to operate the Service. These include:

  • Supabase — database and authentication infrastructure
  • Vercel — hosting and content delivery
  • PostHog — product analytics

Each vendor processes data only as necessary to provide their service and is subject to appropriate data processing agreements. Vendor details and their privacy practices are available on their respective websites.

Trusted research and program partners.

We may share de-identified, aggregated usage data with trusted partners — including academic institutions, public health organizations, and social services programs — for research and program improvement purposes. No individually identifiable information is shared in this context without your explicit consent.

Legal requirements.

We may disclose information if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect the rights, safety, or property of the Task Force, our users, or the public.

Organizational transitions.

If CareJunction transfers operations to another organization, user data may be transferred as part of that transition, subject to the same protections described in this policy.

5. Data Retention

We retain account and profile information for as long as your account is active. If your access is revoked or you request deletion, we will remove your personal information within a reasonable time, except where retention is required by law or legitimate operational need.

Usage and analytics data may be retained in aggregate or de-identified form for research and program evaluation purposes beyond the life of your account.

6. Security

We take reasonable technical and organizational measures to protect information against unauthorized access, loss, or disclosure. These include access controls, encrypted connections, and invite-only access gating.

No system is completely secure. We cannot guarantee absolute security, and we disclaim liability for unauthorized access or disclosure resulting from circumstances beyond our reasonable control.

7. Children

This Service is intended for use by adult professionals and is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors.

8. A Note on Purpose

CareJunction exists to help survivors of trafficking and domestic violence access safe housing more quickly. The no-PII policy in this document is not just a legal formality — it is a core design principle. The system is intentionally built to be useful to referrers without ever needing to hold sensitive information about the people they serve.

9. Your Rights and Choices

You may request access to, correction of, or deletion of your account information at any time by contacting us at navigator@carejunction.org.

If you are located in a jurisdiction with additional privacy rights (such as California under CCPA, or the EU/UK under GDPR), we will honor those rights to the extent applicable. Given that this Service is currently a U.S.-based pilot restricted to vetted professionals, we do not anticipate broad international data processing, but please contact us with any questions.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active users of material changes by email or via a notice within the Service. Continued use of the Service after notice of changes constitutes acceptance of the updated policy.

11. Contact

For questions about this policy or to make a data request, contact us at navigator@carejunction.org.

Tri-County Human Trafficking Task Force · tricountyhttf.org