Privacy Policy

We collect information you provide directly when creating an account or using the platform, including: • Account information: Name, email address, phone number, job title, and organization name. • Patient and caregiver data: Names, dates of birth, addresses, Medicaid IDs, and health-related information necessary to deliver home care coordination services. • Visit and scheduling data: Clock-in/out times, GPS coordinates, visit notes, and service records. • Communications: Messages sent through the platform, support requests, and feedback. • Usage data: Log files, IP addresses, browser type, pages visited, and actions taken within the platform.

We use the information we collect to: • Provide, maintain, and improve the WaiverCarePro platform. • Send SMS notifications including shift reminders, scheduling alerts, authorization expiry notices, and care coordination updates to staff and caregivers who have opted in. • Authenticate users and ensure platform security. • Generate billing claims and EVV records required by Medicaid and state regulations. • Comply with applicable laws, including HIPAA, state Medicaid rules, and EVV requirements under the 21st Century Cures Act. • Respond to support requests and communicate about your account.

By providing your phone number and enabling SMS notifications in your account settings, you consent to receive text messages from The Waiver Consulting Group regarding your WaiverCarePro account. These messages may include: • Shift start reminders and scheduling alerts • Authorization expiry and renewal notifications • Compliance credential expiry reminders • Visit verification confirmations • Important account alerts Message frequency: Varies based on your schedule and account activity. Message and data rates may apply depending on your mobile carrier plan. Sender: The Waiver Consulting Group (WaiverCarePro) To opt out of SMS notifications at any time, reply STOP to any message. To request help, reply HELP. You can also manage your SMS preferences at any time under Settings → Notifications in the platform.

We do not sell your personal information. We do not share your information with third parties for marketing purposes. We may share information only in the following limited circumstances: • Service providers: Trusted vendors who help us operate the platform (e.g., cloud hosting, SMS delivery) under strict confidentiality agreements. • Medicaid and state agencies: As required to submit EVV data, claims, and compliance records on behalf of your agency. • Legal compliance: When required by law, court order, or to protect the rights and safety of our users. • Business transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to affected users. All third-party service providers are prohibited from using your information for any purpose other than providing services to WaiverCarePro.

WaiverCarePro handles Protected Health Information (PHI) as a Business Associate under HIPAA. We implement administrative, technical, and physical safeguards to protect PHI including: • AES-256 encryption for PHI at rest • TLS 1.3 for all data in transit • Role-based access controls limiting PHI access to authorized personnel only • Full audit logging of all PHI access and modifications • Tenant isolation ensuring data never crosses between agencies A Business Associate Agreement (BAA) is available for Enterprise customers. For more information, see our HIPAA Compliance page.

We retain your data for as long as your account is active or as needed to provide services. For Medicaid compliance, visit records and billing data are retained for a minimum of 6 years as required by federal and state regulations. Upon account termination, we will delete or anonymize personal data within 90 days, except where retention is required by law.

Depending on your location, you may have the right to: • Access the personal information we hold about you • Correct inaccurate or incomplete information • Request deletion of your personal information (subject to legal retention requirements) • Opt out of SMS communications at any time by replying STOP or updating your notification preferences • Request a copy of your data in a portable format To exercise these rights, contact us at prakhar.khare@waivergroup.com.

We take data security seriously and implement industry-standard measures to protect your information. However, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to use a strong password and keep your login credentials confidential.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the platform or sending an email to your registered address. Your continued use of the platform after changes take effect constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, please contact us: WaiverCarePro Email: prakhar.khare@waivergroup.com Support: prakhar.khare@waivergroup.com