Privacy Policy

CarePath247 is a product of Paqads Consulting Inc. (“Paqads”, “we”, “us”), an Ontario, Canada company. Paqads operates the CarePath247 business under a business lease and licence from its parent holding company. All intellectual property in the CarePath247 platform — including the software, the CarePath247 name and mark, and the documentation — is owned by that holding company and is operated by Paqads under licence.

Paqads is responsible for the day-to-day operation of the service and for the personal information practices described in this policy. Privacy questions go to privacy@carepath247.com.

It covers visitors to this website and the hosted CarePath247 service used by care agencies. If your agency’s services agreement with us says something different about data handling, that agreement governs for the service.

Agencies use CarePath247 to document the care of children and youth. Those records belong to the agency: the agency (and, where applicable under Ontario law such as PHIPA and CYFSA, its designated custodians) controls them. We process those records only as a service provider, on the agency’s instructions, to operate the service.

• We never sell records or use them for advertising.
• We never use client records to train AI models.
• Access by our personnel is restricted to what operating and supporting the service requires, and is logged.
• Optional AI-assisted features only run when an agency turns them on, and always keep a human in control of the record.

From this website: only what you send us (for example, your email if you contact us).

From service accounts: name, work email, role and permissions, sign-in history, and the activity log the service keeps for accountability (who viewed or changed which record, and when).

• To provide, secure, and support the service.
• To meet legal and contractual obligations.
• To respond when you contact us.
• Never for selling data, advertising, or unrelated profiling.

Production data is hosted in Canada (AWS Canada — ca-central-1 region), including backups. Data residency in Canada is a design requirement of the platform, not an add-on.

• Encryption in transit and at rest.
• Role-based access control, scoped down to the individual home or program.
• Multi-factor authentication and automatic sign-out after inactivity.
• An append-only audit trail of every significant action, including record views.
• Tenant isolation enforced at the database layer.

Service records are retained for as long as the agency’s agreement requires — children’s-services records often carry long statutory retention periods, and the agency controls those schedules. When an agreement ends, we return the agency’s data and then delete it from production systems within the window defined in the agreement, except where law requires longer retention.

We share information only with the service providers needed to run the platform (such as our Canadian cloud-hosting provider), under contracts that bind them to protect it, or where the law requires disclosure. We do not sell personal information — full stop.

If you are a staff member or a person whose information appears in an agency’s records, your first contact is the agency — it controls those records, and we support it in answering access and correction requests. For anything about this website or our own practices, email privacy@carepath247.com and we will respond promptly.

When this policy changes, we post the new version here and update the date at the top. Material changes affecting agencies are communicated directly.