Privacy Policy

Last updated: May 16, 2026

1. Who We Are

Sage (“we,” “us,” or “our”) operates sagelivings.com, a senior living discovery and matching platform. Questions about this policy? Email us at info@sagelivings.com.

2. What We Collect

We collect the following categories of personal information:

Identifiers: Name, email address, phone number (optional).
Account data: Password (hashed), account preferences, saved favorites.
Tour request data: Name, email, phone, preferred tour date, relationship to prospective resident, and any notes you provide.
Care Match quiz responses: The care type, budget, location preferences, and any condition or mobility notes you share when using our matching tool. See Section 7 for how this is treated as consumer health data under certain state laws.
Approximate location: City and state (and, if you opt in, precise geolocation) used to surface nearby communities.
Usage data: Pages visited, search queries, filters applied, facility detail views, IP address, browser type, device type.
User-generated content: Reviews and ratings you submit.
AI chat data: Messages you send to the Sage AI Advisor.

We do not collect Social Security numbers, financial account numbers, medical records, diagnostic information, prescription data, or biometric identifiers.

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Sage platform.
Process and forward tour requests to the specific senior living community you selected.
Send you confirmations and updates related to your tour requests.
Match your Care Match quiz responses to relevant communities, only when you ask us to.
Maintain your account and saved favorites.
Display your reviews on facility pages.
Power the AI Advisor feature.
Analyze usage patterns to improve search results and recommendations.
Comply with legal obligations and enforce our Terms of Service.

4. Who We Share Your Information With

We share personal information in the following circumstances:

Senior living communities: When you submit a tour request, we share your contact information with the specific community you selected, and only that community. We do not share your Care Match quiz responses with any community unless you separately ask us to.
Service providers: We use third-party services including Supabase (database and authentication), Vercel (hosting and analytics), Groq (AI inference), Mapbox (mapping), Resend (transactional email), Stripe (payment processing for provider listings), and Cloudflare Turnstile (bot protection). These providers process data on our behalf under contractual confidentiality and data-protection obligations.
Legal compliance: We may disclose information if required by law, subpoena, or to protect the rights and safety of Sage and its users.
Business transfers: If Sage is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

5. Do Not Sell or Share My Personal Information

Sage does not sell your personal information, and we do not share it for cross-context behavioral advertising. We also do not sell or share consumer health data (as that term is defined under Washington’s My Health My Data Act). If these practices ever change, we will update this policy and provide a clear opt-out mechanism before any change takes effect.

6. Your State Privacy Rights

Depending on where you live, you may have specific rights regarding your personal information. We honor all rights granted to you by applicable state law. To exercise any right described below, email us at info@sagelivings.com with the subject line “Privacy Request” and tell us which state you reside in. We respond within 45 days (with one possible 45-day extension if reasonably necessary) and we will not discriminate against you for exercising your rights.

6.1 California residents (CCPA / CPRA)

Right to Know: Request a copy of the personal information we have collected about you in the past 12 months.
Right to Delete: Request deletion of your personal information, subject to legal exceptions.
Right to Correct: Request correction of inaccurate personal information.
Right to Opt-Out: Opt out of the sale or sharing of your personal information. As described in Section 5, we do not sell or share your information.
Right to Limit Use of Sensitive Personal Information: Limit our use of sensitive personal information to what is necessary to provide the services you request.
Right to Non-Discrimination: We will not deny services, charge different prices, or provide a different level of service because you exercised any CCPA right.

Shine the Light (Cal. Civ. Code §1798.83): California residents may request information about our disclosure of personal information to third parties for those third parties’ direct marketing purposes. Sage does not share personal information with third parties for their own direct marketing.

6.2 Washington residents (My Health My Data Act, RCW 19.373)

The Washington My Health My Data Act (MHMDA) gives Washington residents heightened rights over “consumer health data,” which includes information that identifies a consumer’s past, present, or future physical or mental health status, including precise location near a health facility and information that can be used to infer health status. Our Care Match quiz responses (for example, care type sought and any condition or mobility information you share) may qualify. If you reside in Washington, you have the right to:

Confirm whether we collect, share, or sell your consumer health data, and access that data.
Withdraw consent to our collection or sharing of your consumer health data at any time.
Have your consumer health data deleted from our systems, with notice sent to our affiliates, processors, and any third parties that received it, so they delete it as well. Backups are purged within six months of authentication.
Appeal a denied request. If we deny your request, you may appeal by replying to our denial email; if your appeal is denied, you may contact the Washington Attorney General at atg.wa.gov/file-complaint.

We obtain opt-in consent before collecting, using, or sharing consumer health data for any purpose beyond what is strictly necessary to provide a service you have asked for. We obtain a separate consent before any sharing of consumer health data. See Section 7 below for our full Consumer Health Data Privacy Notice.

6.3 Residents of other states

If you live in a state with a comprehensive consumer privacy law (including, as of this update, Colorado, Connecticut, Delaware, Indiana, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia, among others), you may have rights to access, correct, delete, obtain a portable copy of, and opt out of certain processing of your personal information. We honor these rights where the applicable law applies to us. Use the same contact email above to make a request.

7. Consumer Health Data Privacy Notice

This notice is provided pursuant to Washington’s My Health My Data Act, RCW 19.373.030, and applies to all consumers regardless of state of residence.

Categories of consumer health data we collect: care type preferences and needs (for example, assisted living, memory care, hospice), budget for care, approximate or (with your permission) precise location used to surface nearby communities, and any health-related notes you voluntarily provide in the Care Match quiz, the AI Advisor, or a tour request.

Sources: Information you provide directly to us through forms, the AI Advisor, the Care Match quiz, and tour requests.

Purposes of processing: Solely to provide the matching, search, and advisor features you have asked us to provide; to forward tour requests to a specific community you have chosen; to maintain platform security and prevent abuse; and to comply with applicable law.

Categories of recipients and specific third parties: Consumer health data is processed by our hosting and infrastructure providers (Supabase, Vercel), our AI inference provider (Groq) when you use the AI Advisor, and our email provider (Resend) only when you have asked us to email you a copy of your matches or a confirmation. Each of these is contractually bound to process data only on our instructions. We do not sell consumer health data, and we do not share it for advertising. We do not share Care Match quiz responses with senior living communities unless you separately ask us to do so as part of a tour request.

Your rights: You may confirm collection, access, withdraw consent, request deletion, or appeal a denied request as described in Section 6.2. Email info@sagelivings.com with the subject line “Health Data Request.”

8. Cookies, Tracking, and Opt-Out Signals

Sage uses cookies and similar technologies to:

Keep you signed in to your account.
Remember your search preferences.
Analyze usage patterns to improve the platform.

You can control cookies through your browser settings and through our cookie consent banner, which appears on your first visit. You can reopen the banner from the page footer to change your preferences at any time.

Global Privacy Control (GPC): If your browser sends a GPC signal, we treat that signal as a valid opt-out of the sale or sharing of your personal information for residents of states whose laws recognize GPC (including California). Because we do not sell or share personal information for advertising in the first place, this signal does not change what data we collect, but we honor it as a confirmed opt-out preference.

9. Data Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), hashed password storage, Row Level Security policies on our database, and access controls for our team. No method of transmission over the internet is 100% secure.

10. Data Retention & Account Deletion

We retain your account information for as long as your account is active. When you delete your account, we process your data as follows:

Deleted immediately: Your authentication credentials, profile, saved favorites, group memberships, and Care Match quiz responses are permanently removed.
Anonymized: Reviews you submitted are disassociated from your identity (your name and user ID are removed). The review text and rating remain visible to preserve community transparency. Tour requests are similarly disassociated.
Soft-deleted: Facility listings you own are marked as deleted and hidden from the platform. These records are retained in an inactive state for up to 90 days.

After 90 days, all soft-deleted records (including facility listings and anonymized reviews) are permanently and irreversibly purged from our systems through an automated process.

Tour request data for active accounts is retained for up to 3 years, after which it is automatically deleted.

To request immediate and complete deletion of all your data (including anonymized content) before the 90-day retention period, contact us at info@sagelivings.com with the subject line “Full Data Deletion Request.” We will respond within 45 days, as required by applicable state law (including CCPA/CPRA and the Washington My Health My Data Act), each of which allows one possible 45-day extension when reasonably necessary.

11. Children’s Privacy (COPPA)

Sage is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days’ notice by email or by posting a notice on the Site. For changes that affect how we process consumer health data, we will obtain renewed consent where required by law before the change takes effect.

13. Contact Us

Questions about this Privacy Policy? Contact us at: info@sagelivings.com