Privacy Policy

Draft for counsel review · Last updated September 17, 2026

1. What we collect

Account information for staff and residents (name, email, phone, role), the operational records your organization enters into Sober Suite, and technical logs needed to run and secure the service. We do not use third-party advertising or analytics scripts anywhere resident information is displayed.

2. How we use it

To provide the service to your organization, to secure accounts, to support you when you ask, and to send service notices. Message templates carry no more than is necessary, for example “You have a balance due. Log in to view.”

3. Resident information

Your organization controls resident records. Sober Suite processes them on your instructions. Residents see only their own information. Consent for sharing with a referral source, family contact or employer is recorded per resident and can be revoked; every disclosure is logged.

4. Location data

Device location is captured only at the moment of a check-in and only for residents who have opted in. It is never tracked continuously and can be turned off by the resident at any time.

5. Sharing and processors

We use hosting, payment, email and SMS providers to run the service. The payment processor receives a resident’s name, an invoice number and an amount, nothing about recovery status, testing or house type. We do not sell personal information.

6. Retention and export

Retention is configurable by your organization, with a default of seven years after move-out. The organization owner can export all data at any time. Deletion follows a documented job with a legal-hold switch.

7. Security

Encryption in transit and at rest, individual accounts with multi-factor authentication for staff, role-based access enforced on the server, and an append-only audit log of access to resident records.

8. Contact

Questions about this policy: privacy@sobersuite.com.