Privacy Policy

1. Who We Are

FindABed is operated by Symbiotech LLC. We run a care placement marketplace that connects social workers and discharge planners with licensed care facilities nationwide, currently launching in Michigan. Contact us at austin@symbiotechai.com.

2. Information We Collect

• Account information: Name, email address, organization, professional role, and hashed password credentials.
• Provider profile data: Facility name, address, phone number, website, care types, insurance accepted, pricing, and bed availability.
• Search and usage data: County and care-type filter selections, search queries, pages viewed, and feature interactions — used to improve the platform and not sold to third parties.
• Placement records: Referral submissions, status updates, and discharge dates associated with your account to power the placement workflow.
• Communication preferences: SMS and email opt-in status, notification frequency, and unsubscribe history.

3. How We Use Your Information

• To authenticate your account and provide access to platform features.
• To match social workers with available care beds based on county, care type, insurance, and availability.
• To send referral notifications to providers and status updates to social workers.
• To process placement fees via Stripe.
• To send optional newsletters and product updates with unsubscribe included in every email.
• To improve search relevance, platform reliability, and user experience.

We do not sell personal information to third parties.

4. HIPAA — Protected Health Information

Symbiotech LLC operates as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA) when social workers use FindABed to manage client placement records.

• We handle Protected Health Information (PHI) in accordance with 45 CFR Part 164, Subpart E (Privacy Rule) and Subpart C (Security Rule).
• Treatment coordination uses are permitted under 45 CFR 164.506 (Treatment, Payment, and Health Care Operations).
• We apply the minimum necessary standard: we only access, use, or disclose PHI to the extent required to fulfill the purpose of the request.
• Client records are accessible only to the social worker who created them and to providers who receive a direct referral. Providers see only the information needed to assess placement fit — never the full client record.
• Social workers may request deletion of all client records at any time by emailing austin@symbiotechai.com. Deletion is processed within 30 days.
• Data at rest is encrypted (AES-256 via Supabase). Data in transit is encrypted via TLS 1.2 or higher.

This section is a summary, not legal advice. Consult a qualified HIPAA attorney to assess your organization's specific compliance obligations.

5. SMS Communications

FindABed uses Twilio to deliver SMS notifications. Enrollment is a double opt-in: you enable texts in your account settings, and we send a confirmation message that you must reply YES to before any messages begin.

• SMS opt-in is entirely voluntary and not required to use FindABed.
• Providers receive one bed-availability check-in per week, plus a single follow-up that week if they do not respond, and a notification when a social worker sends a patient referral to their facility. After 17 days with no confirmation we send one final notice and then stop texting until they confirm again.
• Social workers receive an alert when a bed matching their saved search criteria becomes available. These are event-driven, so message frequency varies.
• Text messages never contain patient names, diagnoses, or clinical detail. Referral specifics are only accessible behind a private, tokenized link.
• To opt out at any time, reply STOP to any message from us, or disable SMS in your account settings under Alerts. Reply HELP for help.
• Message and data rates may apply depending on your mobile carrier.
• We do not share or sell your mobile phone number or SMS consent to any third parties or affiliates. Your mobile information is disclosed only to the service providers that deliver the messages you requested (for example, Twilio, our SMS provider), is used solely to send the FindABed notifications you opted into, and is never shared or used for marketing or promotional purposes.

6. Email Communications

FindABed uses Resend to send transactional and marketing emails.

• Transactional emails — referral notifications, password reset, placement confirmations — are sent as part of normal platform operation. You cannot opt out of transactional emails while your account is active.
• Newsletter and digest emails — weekly bed availability summaries, product updates, and sponsor spotlights — require explicit opt-in. You can unsubscribe at any time using the link included in every newsletter.
• We do not share your email address with newsletter sponsors or advertisers.

7. Cookies and Tracking

FindABed uses session cookies required for authentication (via Supabase). We do not use third-party advertising cookies or cross-site tracking. We may use anonymized aggregate analytics to understand platform usage.

8. Data Retention and Deletion

• Account data is retained for as long as your account is active.
• Placement records are retained for 24 months after a case is closed, then purged, unless a longer retention period is required by applicable law.
• To delete your account and all associated data, email austin@symbiotechai.com with subject "Account Deletion Request." Requests are processed within 30 days.

9. Third-Party Services

• Supabase — database and authentication hosting
• Vercel — application hosting and content delivery
• Mapbox — map rendering and geocoding
• Stripe — payment processing
• Twilio — SMS delivery
• Resend — transactional and newsletter email delivery
• Anthropic — the language model behind the site chat assistant

Each service operates under its own privacy policy. We share only the minimum data necessary with each provider to deliver its function.

10. Automated Assistant

The automated assistant is currently switched off. There is no chat window on the site right now, and nothing is being sent to a language model. The rest of this section describes how it works when it is on, and what happened to conversations held while it was.

The chat window on this site is answered by an automated assistant built on a language model provided by Anthropic. It is software, not a person, and it is labelled as such in the chat window.

• What you type in the chat is sent to Anthropic to generate a reply. Anthropic processes it under its own privacy terms and does not use it to train its models.
• We store chat conversations so we can answer follow-up questions and improve the service. If you volunteer a name, an email address, or the type of care you are looking for, we keep those so a person can follow up with you.
• Please do not type a patient's name, date of birth, or medical records into the chat. It is not the right place for health information, and the secure referral tools inside your account are.
• The assistant does not give medical, legal, or financial advice, and it does not decide anything about a placement. A human makes those decisions.
• We keep a list of wording that describes thoughts of harming yourself, an overdose, or an adult being harmed. When a message matches it, the assistant stops and gives you help lines, including 988, instead of continuing the conversation, and we do not record a name or an email from that conversation. That list is a list, not a judgement — it will not catch every way a person might say it.
• You can use every part of this site — search, referrals, listings — without ever opening the chat.

11. Contact