Privacy Policy

1. Introduction

SunsetWell ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website sunsetwell.com and use our elder care facility search services.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when using our services, including:

• Search preferences (ZIP code, care type, insurance)
• Health conditions relevant to facility matching
• Email address (if you subscribe to updates)
• Contact information submitted through inquiry forms

If you follow a facility for alerts, we store your email address with that facility to send change notifications, and every alert includes an unsubscribe link.

2.2 Automatically Collected Information

When you access our website, we automatically collect:

• Device information (browser type, operating system)
• IP address and approximate location
• Pages viewed and time spent on pages
• Referring website addresses

3. How We Use Your Information

We use the information we collect to:

• Provide and improve our facility search services
• Match you with relevant care facilities based on your preferences
• Send updates if you have subscribed to our newsletter
• Respond to your inquiries and support requests
• Analyze usage patterns to improve our website
• Protect against fraud and abuse

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party vendors who assist with website hosting, analytics, and email delivery
• Care Facilities: When you explicitly request information from a specific facility
• Legal Requirements: When required by law or to protect our rights

4.1 AI-Assisted Guidance

When you use our care navigator, we generate personalized guidance using an artificial-intelligence service operated by Anthropic (the Claude API). To do this, we send Anthropic the search context you provide — such as care needs, health conditions relevant to facility matching, general location, and urgency factors. We do not send your name or email address for this purpose. Anthropic processes this data to generate guidance and, per our API agreement, does not use it to train its models. If you prefer not to have your search context processed this way, you can browse facilities directly without using the navigator.

4.2 Subprocessors We Use

• Vercel — website hosting
• Supabase — database services
• Anthropic — AI-generated care guidance (see 4.1)
• Google — analytics, maps, and geocoding
• Resend — transactional email delivery
• Upstash — request rate-limiting infrastructure
• Sentry — error monitoring

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze website traffic (Google Analytics)
• Track conversions and improve our services

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption of data in transit and at rest, secure authentication, and regular security assessments. However, no method of transmission over the Internet is 100% secure.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Search session data is typically retained for 90 days unless you have created an account.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to or restrict certain processing
• Data portability
• Opt out of marketing communications

To exercise these rights, please contact us at privacy@sunsetwell.com.

9. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information as defined by the CCPA.

10. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. We encourage you to review this privacy policy periodically.

12. Contact Us

If you have questions about this privacy policy or our data practices, please contact us at: