GOINSTACARE PRIVACY POLICY

Effective: 09/07/2026

TABLE OF CONTENTS

1. INTRODUCTION

2. DEFINITIONS

3. SCOPE

4. TYPE OF PERSONAL INFORMATION WE COLLECT

5. HOW WE USE INFORMATION

6. SHARING AND DISCLOSURE

7. AGENCY RECRUITMENT AND HIRING SERVICES

8. THIRD-PARTY LINKS

9. NON-HIPAA COMPLIANCE AND DISCLAIMER

10. RETENTION AND DELETION OF INFORMATION

11. SECURITY

12. CHILDREN’S INFORMATION

13. CHANGES TO PRIVACY POLICY

14. INTERNATIONAL USERS

15. CONTACT US

1. INTRODUCTION

1.1. Welcome to goinstacare.com and agencyportal.goinstacare.com (individually and collectively, the “Website”). Please carefully review this Privacy Policy and the notices contained herein (the “Privacy Policy”). We understand the importance of Your privacy and are committed to protecting Your personal information. This Privacy Policy is designed to help You understand how We collect, use, disclose, and safeguard Your personal information when You use Our Website and the Platform. The GoInstaCare Platform is owned and operated by GoInstaCare LLC, a Texas incorporated LLC, and its subsidiaries and affiliates (the “Company”). The Company, Website, and Platform are collectively referred to as “We”, “Us”, or “Our”.

1.2. At GoInstaCare, We operate a Platform that connects: (a) Clients and Care Seekers with Care Providers, for the direct sourcing, booking, and delivery of Care Services; (b) Agencies with the Care Providers and Care Seekers, through Our Subscription Services, enabling an Agency to source, evaluate, and place Care Providers in roles related to Care Services and to receive Care Seeker Leads; and (c) Agencies with tools to post job openings, screen applications, conduct AI-assisted interviews, administer online assessments, collect and verify documents, run background checks, and check references in connection with hiring Candidates (the “Recruitment Services”) etc., as described further in Section 7 below. GIC also allows businesses to join the Platform as Power Partners, maintaining a free public profile so that Users can discover them as an additional resource, subject to GIC’s acceptance in its sole discretion. Our technology ecosystem, encompassing the Website, iOS mobile application, Android mobile application, and any additional online platforms, software processes, video consultations, Subscription Services, Recruitment Services, the Power Partner Program, or any other services facilitated by or through Our Company, collectively constitute the “Platform”.

1.3. Please carefully review this Privacy Policy to understand Our policies and practices regarding the collection, use, and treatment of Your information. By using, accessing, or registering with Our Platform, You consent to Our collection, use, processing, and disclosure of information in accordance with this Privacy Policy. You also acknowledge and agree that Your access to and use of Our Platform is subject to Our Terms of Use, and any conflict between this Privacy Policy and the Terms of Use will be determined in favor of the Terms of Use. You also acknowledge and agree that We are not responsible for how third parties, vendors, and service providers collect or use Your Information.

1.4. The Users of the Website shall be referred to as “You”, “Your”, or “Users”. By using Our Website and the Platform, You consent to the practices described in this Privacy Policy. If You do not agree with Our practices, please do not use Our Website or Platform.

2. DEFINITIONS

2.1. “Agency” refers to a registered User on the Platform who engages in any of the following activities: searching for Care Providers, accessing the Care Provider Database through the Platform, or otherwise using the Platform to request, pay for, review, or facilitate the receipt of services from the Platform.

2.2. “Candidate” refers to an individual who applies for, or is sourced for, a job opportunity posted or managed by an Agency through the Platform’s recruitment and hiring features, prior to being placed or hired as a Care Provider.

2.3. “Care Provider” means a User who uses, or is registered to use, the Platform to offer, provide, receive payment for, or facilitate the provision of Care Services.

2.4. “Care Provider Database” refers to records of Care Providers maintained on the Platform, including but not limited to a Care Provider’s unique identification (Provider ID), full name, contact information, type of Care Services rendered, licensing or certification credentials, specialization, and service availability.

2.5. “Care Recipient” refers specifically to the individual(s) who are the intended recipients of Care Services arranged through the Platform. Care Recipients may include, but are not limited to, individuals requiring home care, childcare, senior care, pet care, or other forms of assistance. The Care Recipient may or may not be the same person as the Client or Care Seeker who arranges and manages the Care Services.

2.6. “Care Seeker” refers to a User who engages in any of the following activities: searching for Care Providers, seeking Care Services from Care Providers, or being identified as a lead made available to Agencies. On the Platform’s consumer-facing Website and mobile applications, this same category of User is also referred to as a “Client” (see below); the terms are used interchangeably depending on context.

2.7. “Care Seeker Database” refers to records of Care Seekers maintained on the Platform that Agencies may access as part of Our Subscription Services based on Care Seeker’s approval to be contacted by an Agency.

2.8. “Care Services” encompasses the services available on the Platform, including those listed, quoted, scheduled, offered, completed, or delivered by Care Providers, as well as those sought, scheduled, paid for, or received by Clients, Care Seekers, or Care Recipients through the Platform.

2.9. “Care Services Locations” refers to the location, specific places, or facilities where a Care Provider is obligated to provide Care Services to a Client or Care Recipient.

2.10. “Client” refers to a registered User on the Platform who engages in any of the following activities: searching for Care Providers, seeking Care Services from Care Providers, booking a Service (or obtaining a quote for one), or otherwise using the Platform to request, pay for, review, or facilitate the receipt of Care Services. See also “Care Seeker” above.

2.11. “GIC” refers to GoInstaCare, used interchangeably with “Company”, “We”, “Us”, or “Our” throughout this Policy.

2.12. “Platform Content” means all content the Company makes available on or through the Platform, including any content licensed from any third party, but excluding User Content.

2.13. “Power Partner” refers to a business or organization approved by GIC to maintain a profile on the Platform’s Power Partner directory as an additional resource for Users seeking senior care or related services. Approval to add a power partner is at GIC’s sole discretion, based on GIC’s review of the business’s relevance to senior care and the uniqueness of its offering and the content provided to GIC by the power partner. Participation in the Power Partner Program is free of charge.

2.14. “Reference” refers to an individual identified by a Candidate or an Agency as a professional or personal reference, whom GIC’s AI agent contacts on the Agency’s behalf as part of the Platform’s reference check feature. The information that needs to be collected during the reference check by the AI agent is defined by the Agency.

2.15. "Subscription Services" refers to the recurring-fee service through which an Agency is granted ongoing access to the Care Provider Database and its associated information and features, together with the Platform's Recruitment Services, including, but not limited to, job posting, AI-assisted screening and interviews, assessments, document verification, reference checks, and background checks, subject to the specific features, usage limits, and automation capabilities included in the Agency's selected plan.

2.16. “User” refers to an individual or organization that has successfully completed the Platform’s account registration process, accepted and agreed to the terms outlined herein, engaged with the Platform, or initiated or responded to requests via the Platform. Users include, without limitation, Clients, Care Seekers, Care Recipients, Candidates, Care Providers, and Agencies.

2.17. “User Content” means all content submitted, posted, uploaded, published, or transmitted on or through the Platform by any User. This encompasses, but is not limited to, photographs, profile information, descriptions, postings, reviews, requests, personal information, messages, and payments processed through the Platform. User Content excludes Platform Content and feedback provided by Users of the Platform (“Feedback”).

3. SCOPE

3.1. This Privacy Policy is applicable to the Information You furnish to Us or that We automatically gather when You visit, access, utilize, or register on the Platform. It includes, but is not limited to, information needed to use the Platform, information Users choose to give Us, information automatically collected through Your use of the Platform and Our payment services, and information collected through third parties (collectively, “Information”).

4. TYPE OF PERSONAL INFORMATION WE COLLECT

4.1. Overview. The specific Information We collect depends on Your role on the Platform. The categories described in this Section, organized below by Client, Care Seeker, and Care Recipient; Care Provider; Agency; Candidate; and Reference; Power Partner; and Other Visitors and Users, are illustrative examples and are not intended to be an exhaustive or complete list. The Information We collect from You may include, but is not limited to, the categories described below, and may evolve as We add new features or services to the Platform.

4.2. Information We Collect From Care Seekers, Clients and Care Recipients.

4.3. Information We Collect From Care Providers.

4.4. Information We Collect From Agencies.

4.5. Information We Collect From Candidates.

See Section 7 for a complete description of how this Information is used.

4.6. Information We Collect From References.

4.7. Information We Collect From Power Partners.

4.8. Information We Collect From Other Visitors and Users. If You visit or interact with the Platform without completing registration as a Client, Care Seeker, Care Recipient, Care Provider, Agency, Candidate, Reference, or Power Partner, including if You begin, but do not complete, an account registration, signup, or Power Partner registration process, We may still collect limited Information from You, including:

4.9. Information We Collect Automatically From All Users. Regardless of Your role, We automatically collect:

4.10. Information We Collect From Third Parties. Depending on Your role, We may also collect Information from third parties, including SureCheck for background checks, reference sources, credential verification services, payment processors, and publicly available records, as described throughout this Section and in Section 6.5 and Section 7.

5. HOW WE USE INFORMATION

We are committed to transparency and safeguarding Your privacy. By engaging with Our Platform, You consent to the following uses of Your Information:

5.1. Service Provision: to improve the Services offered through the Platform, including facilitating connections between Clients, Care Seekers, Agencies, and Care Providers, processing bookings and payments, and enabling communication within Our community.

5.2. User Verification: to confirm the accuracy of Your profile and establish trust within Our community, using identity verification details and background checks.

5.3. Communication: to send notifications, updates, and service-related messages, respond to Your inquiries, and inform You about Platform enhancements and promotional offers (You may opt out of promotional communications).

5.4. Data Sharing: We do not sell Your Information to third parties for general marketing purposes. The only way We share Your Information in exchange for compensation is through Our Subscription Services: Agencies pay a subscription fee for access to the Care Provider Database in order to identify, evaluate, and place Care Providers, and to receive Care Seeker Leads in order to provide Care Services to Care Seekers upon Care Seeker’s approval to be contacted by an Agency. The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties. This exclusion applies to the compensated sharing described in this Section 5.4, and does not limit disclosures made for legal compliance purposes or in connection with a business transfer, as described in Sections 5.7 and 5.10 below.

5.5. Improvement of Services: to enhance the functionality, usability, and features of the Platform, including aggregating and anonymizing data for statistical research, customer service training, and enabling User communication.

5.6. Community and Support: to facilitate interactions within the Client, Care Seeker, Agency, and Care Provider community, including User reviews and references, address support requests, resolve disputes, and investigate or prevent fraudulent activity.

5.7. Legal Compliance: to comply with legal obligations, enforce Our terms and policies, and respond to legal requests, including from law enforcement.

5.8. Marketing and Personalization: We may use Your Information to:

5.9. Protection of Rights and Interests: to enforce agreements and policies and protect against fraudulent or unauthorized activity.

5.10. Business Transfers: In the event of a merger, acquisition, sale of assets, or other business transfer, Your Information may be transferred to a third party as part of the transaction. We will notify You of such transfers and any changes to Our privacy practices.

5.11. Anonymized Information: We may use anonymized and aggregated Information for business analytics, research, and reporting; this Information does not identify individuals.

5.12. Payment Information.

5.13. Linking Third-Party Accounts.

5.14. Text Messaging (SMS) Communications.

5.14.1. We may send You text messages for transactional and service-related purposes only. We do not send marketing or promotional text messages. Examples of the messages You may receive include, but not limited to, the following:

5.14.2. Message frequency varies depending on Your use of the Platform. Message and data rates may apply.

5.14.3. You may opt out of text messages at any time by replying “STOP” to any message You receive from Us, or by contacting Us at support@GoInstaCare.com.

5.14.5. See Section 5.4 above regarding the treatment of text messaging originator opt-in data and consent.

5.15. Recruitment Services. Where an Agency uses the Platform's Recruitment Services, We use Candidate, Reference, and related Information to operate AI-assisted screening, interviews, assessments, document verification, reference checks, and background checks on the Agency's behalf, and to display results and records to the Agency's hiring manager. See Section 7 for a complete description of this processing.

5.16. Power Partner Directory. We use the Information a Power Partner submits to review and approve its application, and, once approved, to display an aggregated, searchable directory of Power Partners to Users seeking additional senior care or related resources. See Section 4.7 for the categories of Information collected from Power Partners.

6. SHARING AND DISCLOSURE

6.1. Information Published in Profiles, Listings, and Other Public Information.

6.3. Service Requests.

6.4. Sharing of Information for Legal Compliance.

6.5. Information Shared with Third Parties.

6.6. Business Transfers and Reorganization.

7. AGENCY RECRUITMENT AND HIRING SERVICES

7.1. Overview. GIC provides Agencies with tools to source, screen, interview, assess, verify documents for, check references on, run background checks on and perform other actions needed to hire the candidate or care provider through the Platform (collectively, the “Recruitment Services”).

7.2. AI-Assisted Screening and Interviews.

7.2.1. GIC uses artificial intelligence to screen resumes and applications for fit against an Agency’s stated criteria.

7.2.2. Agencies may customize the questions asked during a Candidate’s AI-conducted interview, either by using AI-generated questions or uploading their own. The underlying interview process itself is standardized across the Platform and is not customizable by the Agency.

7.2.3. Participation in an AI interview requires the Candidate to grant camera and microphone permissions. At the start of the interview, the Candidate is notified that the interview is being recorded. The interview is recorded on video.

7.2.4. If the AI determines the Candidate to be a good fit, the Platform will attempt to connect the Candidate with the Agency’s hiring manager live. If the hiring manager is unavailable, the Candidate will be asked to schedule a call using calendar availability configured by the hiring manager during account setup. If the Candidate does not schedule a call, GIC will send reminders by text, email, and phone call.

See Section 7.3 for additional detail regarding the calendar integration used for this scheduling feature.

7.2.5. Camera and microphone permissions are also requested from the Agency’s hiring manager in connection with these calls.

7.3. Calendar Integrations (Google Calendar and Microsoft Outlook/365 Calendar).

7.3.1. An Agency’s hiring manager or other Authorized Agency User may connect a Google Calendar or Microsoft Outlook/365 Calendar associated with an Agency-designated email account to the Platform. This connection is made only by Authorized Agency Users; We do not access, request, or connect the calendars of Candidates, Care Providers, Care Seekers, or any other Users.

7.3.2. When a calendar is connected, We access it solely to: (i) read free/busy availability information to determine when the Agency’s interviewers are available; and (ii) create, update, or cancel calendar events for interviews scheduled between a Candidate and the Agency through the Platform.

7.3.3. We request only the minimum calendar permissions necessary for these functions. We do not read the content, descriptions, attachments, or attendee details of the Agency’s other calendar events, and We do not use calendar data for advertising, marketing, profiling, or any purpose other than interview scheduling. Calendar data is not sold, and is not shared with any third party except as necessary to operate the scheduling feature or as required by law.

7.3.4. We do not permanently store the contents of a connected calendar. We retain only the details of interview events created through the Platform (date, time, participants, and related scheduling records), which are retained in accordance with Section 7.11.

7.3.5. The Agency may disconnect a linked calendar at any time through its account settings, or by revoking the Platform’s access directly through its Google Account security settings or Microsoft account permissions page. Upon disconnection, We cease all access to the calendar.

7.3.6. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7.4. Assessments. Agencies may create online assessments for Candidates. Assessments require the Candidate’s camera permission and record both the Candidate’s screen and face. Before recording begins, a notice is displayed on screen informing the Candidate that the assessment is being recorded.

7.5. Document Collection and Verification.

7.5.1. Agencies may request documents from Candidates, which may include sensitive identity documents such as a passport, driver’s license, Social Security card, and professional certifications.

7.5.2. GIC uses AI to check submitted documents for expiration date, readability (including blur or glare), and name match against the Candidate’s profile. GIC does not verify the authenticity of any submitted document.

7.5.3. The Agency’s hiring manager reviews submitted documents and may approve, reject, or request resubmission.

7.5.4. Agencies may download any Candidate-provided documents at any time during the applicable retention period described in Section 7.11.

7.6. Reference Checks.

7.6.1. GIC conducts reference checks using contact information provided by the Candidate or the Agency.

7.6.2. GIC contacts References by email and by phone call. The phone call is conducted by an AI agent and is recorded; the Reference is notified at the start of the call that it is being recorded. The call recording is retained by GIC but is not made available to the Agency. Instead, GIC generates a PDF summary of the reference conversation using AI. If a Reference responds through an online form rather than by phone, GIC likewise generates a PDF summary of that response for the Agency.

7.7. Background Checks.

7.7.1. Basic background checks include a national criminal database search, Social Security number search, terrorist watchlist check, and sex offender registry check.

7.7.2. Background checks are conducted by a third-party provider, SureCheck. GIC collects the Candidate’s information and transmits it to SureCheck to conduct the check. GIC retains the date the background check was run and whether the Candidate passed or failed, along with a copy of the completed report as returned by SureCheck. The report may include the Candidate’s date of birth and the last four digits of their Social Security number. GIC does not otherwise store the Candidate’s full Social Security number or other full identifying information used to initiate the check; that information is transmitted directly to SureCheck for processing. The completed report is made available within the Candidate’s profile, in both the Documents section and a dedicated Background Check section.

7.7.3. SureCheck provides all legally required disclosures directly to the Candidate before the Candidate submits information for a background check.

7.7.4. GIC does not independently verify, and is not responsible for, the accuracy of background check results provided by SureCheck.

7.7.5. Candidates who do not pass a background check are directed through a Pre-Adverse Action and Adverse Action process administered by SureCheck.

7.8. The AI agents used for interviews, screening, and reference checks are built in-house by GIC. GIC uses various third-party AI models to support specific functions within these agents, including, but not limited to, voice-to-text transcription, response analysis, and text-to-voice generation.

7.9. Caregiver Database Search.

7.9.1. Agencies may search GIC’s existing database of Care Provider profiles. Search results are limited to caregivers located within 100 miles of the Agency’s registered location.

7.9.2. Care Provider and Care Seeker profiles maintained in GIC’s own database are shared with all partner Agencies, including after a particular Agency has hired a Care Provider from that pool.

7.9.3. Candidate data that an Agency sources independently, such as from other job boards or manually entered records, is not shared with other Agencies.

7.9.4. GIC’s Agency partners operate throughout the United States; this Recruitment Service is not limited to specific states.

7.10. Job Posting. Job postings may be distributed to multiple third-party job platforms. Posting to certain platforms, such as Indeed, may require an additional fee. When a job is posted to a third-party platform, Candidate data submitted through that platform may be shared with it in accordance with that platform’s own terms.

7.11. Retention of Recruitment Data.

7.11.1. Agencies may download Candidate-provided documents and interview or assessment videos at any time during the applicable retention period. Reference check recordings are not available for download; only the PDF summary described in Section 7.6.2 is accessible to the Agency.

8. THIRD-PARTY LINKS

8.1. Our Platform may contain links to third-party websites, applications, or services not owned or operated by Us, provided for informational or convenience purposes only.

8.2. We do not endorse, warrant, or guarantee the accuracy, relevance, legality, or safety of external content reached via such links.

8.3. Users who access third-party links do so at their own discretion and risk, and are responsible for reviewing those third parties’ own policies.

8.4. Third-party data collection practices are not governed by this Policy.

8.5. We disclaim liability for the actions, content, or data practices of third parties.

8.6. Inclusion of a third-party link does not imply endorsement or affiliation.

8.7. Users are encouraged to report issues related to third-party links to Us.

8.8. We do not guarantee that all third-party links will remain accurate, functional, or accessible.

9. NON-HIPAA COMPLIANCE AND DISCLAIMER

9.1. The Platform is not a covered entity or business associate under HIPAA.

9.2. While Users may share healthcare-related information with Care Providers, the Platform is not HIPAA-compliant and lacks HIPAA-standard PHI infrastructure.

9.3. Users are solely responsible for the privacy and security of any healthcare-related information they choose to share.

9.4. The Platform assumes no HIPAA obligations.

9.5. Users requiring HIPAA-compliant communication or storage should seek an appropriate alternative platform.

9.6. Users should exercise discretion when sharing healthcare-related information.

9.7. The Platform does not provide medical advice, diagnosis, or treatment.

9.8. No doctor-patient or healthcare provider-patient relationship is established through the Platform.

9.9. Healthcare-related information shared on the Platform is not subject to HIPAA-level protection.

9.10. Users are responsible for compliance with applicable healthcare privacy laws; We assume no legal obligation in this regard.

10. RETENTION AND DELETION OF INFORMATION

10.1. We retain personal Information for as long as necessary to fulfill the purposes outlined in this Policy, or as required by law.

10.2. Upon request or the end of the retention period, We will delete or anonymize Your Information from active databases.

10.3. Residual copies may persist temporarily in backup systems for data integrity, security, and legal compliance.

10.4. Publicly shared content, such as reviews or forum posts, may remain accessible after account deletion.

10.5. We may retain Information beyond the standard period as required by law or to resolve disputes and enforce agreements.

10.6. Information may be retained for legitimate business interests such as fraud prevention and auditing.

10.7. Information no longer needed will be securely disposed of or anonymized.

10.8. Deletion requests should be directed to Our designated privacy team and will be processed in accordance with applicable law.

10.9. Information collected in connection with Agency recruitment and hiring activities, such as interview recordings, assessment recordings, documents, and background check records, is retained according to the specific retention periods set out in Section 7.11 above, rather than this Section.

11. SECURITY

11.1. We maintain security measures to protect Your Information from unauthorized access, disclosure, alteration, or destruction.

11.2. We use encryption technologies such as SSL/TLS during data transmission.

11.3. We conduct regular security audits of Our systems and infrastructure.

11.4. We encourage strong, unique passwords and multi-factor authentication; We do not store plaintext passwords.

11.5. We maintain protocols for prompt identification, notification, and remediation in the event of a security incident.

11.6. Users are responsible for safeguarding their own login credentials and reporting suspicious activity.

11.7. Third-party service providers We work with adhere to industry-standard security practices.

11.8. No method of transmission or storage can be guaranteed 100% secure.

11.9. Report security concerns to support@GoInstaCare.com.

12. CHILDREN’S INFORMATION

12.1. Our services are not intended for individuals under 18. We do not knowingly collect personal Information from children without appropriate parental or guardian consent where required by law.

12.2. We will make reasonable efforts to obtain parental or guardian consent where required.

12.3. If We inadvertently collect a child’s Information without appropriate consent, We will promptly delete it.

12.4. Parents or guardians may contact support@GoInstaCare.com to request deletion of a child’s information.

13. CHANGES TO PRIVACY POLICY

13.1. We may periodically update this Policy to reflect changes in Our practices, legal requirements, or service improvements, and will notify You of significant changes through the Platform or other means such as email, where required by law.

13.2. Continued use of Our services after an update constitutes consent to the revised terms.

13.3. This Policy’s effective date is displayed at the top of the document.

13.4. If You disagree with changes, You may discontinue use of Our Services.

14. INTERNATIONAL USERS

14.1. If accessing the Platform from outside the United States, U.S. laws and regulations apply to Your use, and by using the Platform You consent to their application.

14.2. Your Information may be stored and processed in the United States or other countries where Our service providers or servers are located.

14.3. You remain responsible for compliance with local laws applicable in Your jurisdiction.

14.4. Disputes are governed by U.S. courts and U.S. law regardless of Your location.

14.5. Any dispute is governed by the laws of the State of Texas, without regard to conflicts-of-law principles, and You consent to the personal and exclusive jurisdiction of state and federal courts located in Texas.

15. CONTACT US

If You have any questions or concerns relating to this Policy or Our privacy practices, please contact Us at support@GoInstaCare.com or by mail at 8585 Spicewood Springs Rd, #627, Austin, TX 78759.