Privacy Policy

Who this policy covers

This policy applies to House of Compassion (“HOC,” “we”) and the website at compassioncare.org. House of Compassion is a 501(c)(3) nonprofit residential treatment center for adolescent boys, headquartered at 13900 Southern Rd, Grandview, MO 64030.

This policy covers our website and Compass Chat, our staff messaging app (see Compass Chat below). Clinical care delivered at HOC — including treatment records, medical information, and any Protected Health Information (PHI) — is governed by a separate HIPAA Notice of Privacy Practices, which residents and families receive directly at admission. If you are a current or former resident or family member and want a copy, call 816-761-CARE.

What we collect

We collect information in three ways:

1. Information you give us in a form. When you contact us, subscribe to the newsletter, or sign up for donation notifications, we collect the fields you fill in — typically your name, email address, and an optional phone number. The contact form also collects the message you write and the topic you select.

2. Information collected when you donate. Donations are processed by Givebutter, a third-party payment platform. When you donate, Givebutter collects the information needed to process the gift — name, email, billing address, payment details, and donation amount. HOC receives donation records (name, email, amount, designation) from Givebutter so we can thank you and issue tax receipts. We never see or store your full payment card information.

3. Basic analytics about your visit. We use Cloudflare Web Analytics, which is cookie-free and privacy-preserving. It tells us aggregate things like how many people visited a page, which countries they came from, and which pages are most popular. It does not track individuals across sites, does not use cookies, and does not require a consent banner under GDPR/CCPA. We do not use Google Analytics, Facebook Pixel, or similar cross-site trackers.

How we use it

To do what you asked us to do. If you sent us a message, we use your email to respond. If you subscribed to the newsletter, we use it to send the newsletter.

To run HOC as a nonprofit. We use donor information to acknowledge gifts, issue tax-deductible receipts, send year-end statements, and occasionally to send fundraising appeals. Every email has one-click unsubscribe.

To improve the site. We use aggregate analytics to understand which pages are useful, which broke, and where visitors get stuck.

We do not sell your information. We do not rent it. We do not trade it.

Text messages (SMS)

House of Compassion operates a private staff application, Compass Chat, that our team uses to communicate. When an authorized staff member signs in, House of Compassion sends a one-time verification code by SMS to the mobile number on their employee record. Staff opt in by entering their own mobile number in the app and requesting a code. These messages are strictly transactional — login verification only. We do not send marketing or promotional text messages.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Phone numbers and SMS consent collected for verification are used solely to deliver login codes and are never shared with third parties or affiliates for their own marketing.

Message frequency varies based on your sign-in activity. Message and data rates may apply. Reply STOP at any time to stop receiving messages, or HELP for help. SMS messages are transmitted on our behalf by our messaging provider, Twilio.

Compass Chat (staff app)

Compass Chat is a private messaging app for House of Compassion employees. There is no public sign-up: an account exists only for people on an active HOC staff record, and only they can sign in.

What the app collects, and why:

• Your name, job role, and mobile number from your staff record, to sign you in and show your teammates who you are.
• What you share in the app (messages, photos and videos, posts, comments, reactions, polls, and your profile photo), so it can be delivered to the people you send it to.
• Device and notification information (a push-notification token and your notification settings), so your phone can receive alerts.
• Crash reports (error details and app version), so we can find and fix problems.

We use this information only to run the app for our team. We do not use it for advertising, we do not track you across other apps or websites, and we do not sell it. Face ID is handled by your iPhone; we never receive your face data. Messages saved on your phone are stored encrypted.

Who handles it for us: Supabase stores the app's data on secure servers; Expo and Apple deliver push notifications; Twilio sends sign-in codes.

How long we keep it: Messages and shared files are workplace records. They are kept while HOC needs them for its operations and legal obligations, including after an employee leaves. When your employment ends, your account is deactivated and you can no longer sign in. Crash reports are used only to fix problems in the app.

Your choices: You can change your profile photo, turn off message previews and notifications, and lock the app with Face ID at any time in the app's Settings. To see, correct, or delete personal information in Compass Chat, email director@compassioncare.org. We will delete what we are not required to keep as a workplace record.

Who we share it with

We share data only with service providers that help us operate, and only the data they need:

• Givebutter processes donations and hosts our newsletter contact list. See Givebutter's privacy policy at givebutter.com/privacy.
• Resend delivers transactional emails (form notifications to our team). See Resend's privacy policy at resend.com/legal/privacy-policy.
• Cloudflare hosts the website and provides analytics. See Cloudflare's privacy policy at cloudflare.com/privacypolicy.
• Twilio delivers the login verification text messages for our staff app. See Twilio's privacy policy at twilio.com/legal/privacy.

We may also disclose information if required by law (court order, subpoena), or to protect the safety of a resident, staff member, or member of the public.

How long we keep it

Donation records are retained for at least seven years to meet IRS and state nonprofit recordkeeping requirements. Contact form messages are kept for two years. Newsletter subscribers stay on the list until they unsubscribe. Analytics data is aggregate and not tied to individuals.

Children's privacy

This website is intended for adult visitors — donors, families, referring professionals, and prospective staff. We do not knowingly collect personal information from children under 13 through the website. If you believe a child has submitted information here, contact us at director@compassioncare.org and we will delete it.

Your choices and rights

You can ask us to see, correct, or delete information we have about you. Email director@compassioncare.org and a real person will respond within ten business days.

To unsubscribe from the newsletter, click the unsubscribe link at the bottom of any email. It works in one click.

If you live in California, Colorado, Virginia, or Connecticut, state law gives you additional rights (to know, to delete, to correct, to opt out of sale — though we don't sell). Use the email above and tell us which state you're writing from so we can apply the right standard.

Security

The site is served over HTTPS. Donations are processed by Givebutter on PCI-compliant infrastructure — HOC never sees full card numbers. Form submissions are transmitted encrypted to our notification inbox and to Givebutter. No system is perfectly secure, but we take reasonable steps consistent with our size and the sensitivity of what we hold.

Changes to this policy

When this policy changes, we update the effective date at the top. Material changes (new data collection, new sharing) will also be announced in the newsletter.

Contact us about privacy

House of Compassion
13900 Southern Rd
Grandview, MO 64030
816-761-CARE · director@compassioncare.org