KinVista Privacy Policy

Effective date: September 15, 2026 · Last updated: September 15, 2026

KinVista LLC (“KinVista,” “we,” “us,” or “our”) operates the KinVista platform at kin-vista.com (the “Service”), a senior-care referral and placement CRM used by placement advisors (“reps”) and their organizations to help families find appropriate senior-living communities. This Privacy Policy explains what information we collect, how we use, share, and protect it, and the choices and rights you have — including how we handle information from a Google account when a rep chooses to connect one.

By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Who we are

KinVista LLC operates the KinVista platform. Some pages of the Service are visible to the public (for example, a community directory); other areas are available only to signed-in reps and the organizations they belong to.

Contact for privacy questions:

KinVista LLC
7628 E Barstow St, Mesa, AZ 85207
privacy@kin-vista.com

2. Information we collect

a. Information from reps and organizations (our customers)

  • Account information — name, email address, phone number, organization/agency name, and role.
  • Authentication data — credentials and session information managed through our authentication provider to sign you in and keep your account secure.
  • Billing information — plan and subscription details. Payments are processed by our payment provider (Stripe); we do not receive or store full payment-card numbers.
  • Content and usage data — information reps enter into the Service and records of actions taken in it.
  • Google account information — only if a rep chooses to connect Google Calendar. See Section 3.

b. Information about families and referral contacts (intake)

  • Contact information (name, phone, email).
  • Care needs and preferences relevant to placement, provided voluntarily for matching purposes.
  • General budget range and payment type needed to identify suitable communities.
  • Location, timeline, and referral context.
  • Notes from communications with advisors.

We do not collect Social Security numbers, full financial-account or payment-card numbers, or medical records or protected health information from hospitals or other healthcare providers through our intake process. KinVista is not a healthcare provider, and the Service is not a substitute for medical advice.

c. Information collected automatically

When you use the Service, we and our platform providers automatically collect limited technical information such as IP address, browser and device type, and log data, using strictly necessary cookies and similar technologies to keep you signed in and operate the site. See Section 6.

3. Google user data (Google Calendar)

Connecting Google Calendar is optional and is initiated by the rep. When a rep connects their Google account, KinVista requests the following Google OAuth scopes and uses them only as described:

  • calendar.events — to create and update calendar events for appointments the rep schedules in KinVista (such as tours and follow-ups). This is a one-way sync: KinVista writes KinVista-generated events to the rep's chosen calendar. KinVista does not read, import, or display the rep's existing calendar events.
  • calendar.calendarlist.readonly — to show the rep a read-only list of their own calendars so they can choose which calendar KinVista should write to (the calendar picker in Settings). KinVista accesses calendar names and IDs only, never event contents.

How we store and protect it. OAuth access and refresh tokens are encrypted using AES-256-GCM before storage and are used only to write the rep's KinVista appointments to their chosen calendar. We store the rep's Google account email address, the selected calendar ID, and the connection or sync status.

Who can see it. Google Calendar data connected by a rep is used solely for that rep's own scheduling. It is never shared with senior-living communities, families, or any other KinVista user, and it is not used for any purpose other than the calendar-sync feature described here.

How to revoke access. A rep can disconnect Google Calendar at any time from KinVista Settings, and/or revoke KinVista's access directly at myaccount.google.com/permissions. When you disconnect, we stop syncing and delete the stored Google tokens.

No sale; no advertising. We do not sell Google user data, use it for advertising, transfer it to others to make money, or use it to train generalized artificial-intelligence or machine-learning models.

Limited Use. KinVista's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. How we use information

  • Provide and operate the Service, including matching families with senior-living communities that fit their stated needs.
  • Create and update a rep's appointments on their connected Google Calendar (Section 3).
  • Communicate with reps and families about placements, appointments, and next steps.
  • Process billing and administer accounts.
  • Maintain the security and integrity of the Service, prevent fraud and abuse, and comply with legal obligations.
  • Analyze and improve the Service.

5. How we share information

We share information only as described below. We do not otherwise sell or rent your personal information.

  • Service providers (subprocessors) that help us operate the Service, each acting on our behalf and limited from using your information for their own purposes: Supabase (database, authentication, and backend hosting), WeWeb (web-application hosting), n8n (workflow automation), Stripe (payment processing), Google (Google Workspace and the Google Calendar API), and Anthropic (the Claude API, used to help read and organize documents such as community submissions).
  • Senior-living communities. When an advisor uses KinVista to pursue a placement, the Service shares the relevant client information the advisor selects with the communities they choose — at the advisor's direction and on the advisor's behalf. KinVista's own revenue comes solely from subscription fees paid by advisors; KinVista does not receive referral or placement fees from communities. Google Calendar data is never shared with communities.
  • Legal and safety. We may disclose information where required by law or legal process, or to protect the rights, property, or safety of KinVista, our users, or others.
  • Business transfers. If KinVista is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy.

On “sale” of personal information. We do not sell your personal information for money — KinVista's revenue is subscription fees paid by advisors. When an advisor uses the Service to share a client's information with communities, KinVista does so at the advisor's direction. Depending on your state's law, some sharing may still be treated as a “sale” or “targeted sharing”; where it is, you may opt out by contacting us using the details in Section 1 (or the advisor you are working with).

6. Cookies and similar technologies

We use strictly necessary cookies and similar technologies to sign you in, keep your session active, and operate core site functionality (provided by our hosting and authentication platforms). We do not currently use third-party advertising cookies or cross-site tracking pixels. If this changes, we will update this Policy and, where required, provide a way to manage those technologies.

7. Your privacy rights and choices

Depending on where you live, you may have some or all of the following rights regarding your personal information:

  • Request access to, or a copy of, the personal information we hold about you.
  • Correct inaccurate information.
  • Request deletion of your information.
  • Request a portable copy of your data.
  • Opt out of the “sale” or “targeted sharing” of personal information (see Section 5).
  • Opt out of certain uses of sensitive information.

Residents of states with comprehensive privacy laws — including Minnesota, California, Colorado, Connecticut, Virginia, and others — may have specific rights under those laws. To exercise any right, contact us at privacy@kin-vista.com. We will verify your request and respond within the time required by applicable law. You may also designate an authorized agent where the law permits, and you have the right not to be discriminated against for exercising your rights.

8. Data retention

We retain personal information for as long as needed to provide the Service and for a reasonable period afterward — for example, to complete a placement, provide follow-up assistance, meet legal, tax, or accounting obligations, and resolve disputes — after which we delete or de-identify it. Google OAuth tokens are deleted when a rep disconnects Google Calendar.

9. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect your information, including encrypting data in transit, encrypting connected Google Calendar tokens at rest (AES-256-GCM), and restricting access to authorized personnel. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children's privacy

The Service is intended for adults arranging senior-living placements. We do not knowingly collect personal information from children under 13, and we do not direct the Service to children. If you believe a child has provided us information, contact us and we will delete it.

11. Third-party links and services

The Service may link to third-party websites or services (for example, senior-living community websites) that we do not control. This Privacy Policy does not apply to those third parties, and we encourage you to review their privacy policies.

12. Where your information is processed

The Service and its providers store and process information in the United States and, in the case of certain providers, in other locations where they operate. By using the Service, you understand your information may be processed in these locations.

13. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date and, for material changes, provide additional notice where required. Your continued use of the Service after an update means you accept the revised Policy.

14. Contact us

Questions, requests, or complaints about this Privacy Policy or your information can be directed to:

KinVista LLC
7628 E Barstow St, Mesa, AZ 85207
privacy@kin-vista.com