Privacy Policy

Which site you are on

This policy covers two places, and they are not the same.

getliftright.com is our marketing site. It holds no participant records. What it collects is visitor information and whatever you type into a contact or demo form.

app.getliftright.com is the application. It holds customer data and participant records. Most of this policy is about it.

Two roles, and why the difference matters

Lift Right holds two kinds of information, and our responsibilities are not the same for each.

Information about the organizations that buy Lift Right and the staff who use it. We decide how that is handled. We are the controller of it.

Information about the participants those organizations serve. The organization decides what to collect and why. We hold it on their instructions and do not use it for our own purposes. We are the processor of it.

This is the most important thing in this policy, because it decides who you ask when you want something done. If you are a participant, the organization serving you holds your record, and your request goes to them.

What we collect

About customers and their staff

Account information. Organization name, staff names, work email addresses, role assignments, credentials, sign-in times, and a billing contact. Used to create and secure accounts, bill the customer, and provide support.

Usage information. Pages visited in the application, features used, error reports, and assistant request counts. Used to operate, secure, debug, and improve the service.

About participants

The organization serving a participant decides which of these to record.

Identity and contact. Name, date of birth, email, phone, city, county, state, postal code, photograph.

Demographic information. Race and ethnicity, gender, primary and secondary language, country of origin, country of birth, country of last residence, years in the United States, arrival date.

Self-sufficiency assessments. Scores from 1 to 5 across twelve domains including Mental Health and Wellbeing, Physical Health, Housing, Employment and Income, and Legal and Documents, recorded over time.

Service and case records. Case notes, service contacts and duration, pathway steps and tasks, referrals, follow-up checkpoints, exit date, exit reason, and outcomes at exit.

Military service. Veteran status, branch, service period, character of discharge, and discharge verification.

Financial and benefits information. Income at entry, benefits at entry, salary range, scholarship applications and awards, and financial assistance disbursed.

Safety flags. An indicator that an intake answer met a safety screening threshold, and the time crisis resources were shown.

Uploaded documents. Files a caseworker or participant attaches to a record, which may contain identity documents, letters, or assessments.

Consent and disclosure records. Consent type, scope, purpose, named recipient, whether onward sharing is permitted, method of signature, expiry, revocation, and a log of what was disclosed to whom and when.

Demographic information, assessments, military service, financial information, safety flags, and uploaded documents are sensitive. They are collected because funders require them or because services depend on them, and they are held accordingly.

What we deliberately do not collect

For the people in this system, what is absent matters as much as what is present.

Immigration status. Lift Right never asks for or stores a participant’s immigration status or deportability. Immigration category, such as refugee or asylee, is captured only where a specific funder requires it, with consent, and only in the eligibility layer.

Social Security numbers. No field exists for one.

Street address. We record city, county, state, and postal code. There is no street address field, so the system cannot say where a participant sleeps.

Precise location. We do not collect device location. Location is only what a participant reports, at the level of a city or county.

Criminal history. No field records an offense, conviction, sentence, or supervision status. That is true for re-entry programs too.

Payment card details. Card details are entered directly with our payment processor and never reach Lift Right systems.

Advertising and cross-site tracking. No advertising trackers, no retargeting pixels, and no third-party analytics that build profiles across sites.

Cookies and tracking

On this marketing site

This site counts visits with Vercel Web Analytics, which sets no cookies, and with Google Analytics, which sets cookies in your browser to tell visits apart and to see which pages are read and where visitors came from. We do not use either for advertising, and Google’s use of this data to improve its own products is switched off.

We run no advertising pixels, no retargeting, and no session replay on this site.

If you submit a contact form here, what you type is sent to us, stored in our database and emailed to us. We use it to reply to you.

In the application

Lift Right sets only the cookies needed to keep you signed in and to protect your session. They are set by the authentication library, not by a third party, and they cannot be refused while using the application.

There are no analytics cookies, no advertising cookies, no session replay, and no tag manager.

The application does record which features are used, inside the customer’s own database, with coarse context and no participant data. That information is not sent to an analytics company.

Do Not Track and Global Privacy Control

The application sets no tracking cookies. This site sets Google Analytics cookies, except when your browser sends a Do Not Track or Global Privacy Control signal: then it does not load Google Analytics at all. We do not sell personal information.

Third-party requests

This site and the application load their typeface from Google’s font service, so your internet protocol address and browser details reach that service when a page loads. No cookie is set by us for it and nothing about your visit is sent. This site also loads Google Analytics, described above. The application does not.

Who else sees the information

Companies that process data for us

Every subprocessor is a United States company and stores customer data there. Anthropic’s model processing may run in another country. None of them uses customer data to train models.

Supabase, Inc. provides the database, authentication, and file storage. It holds all customer data.

Vercel, Inc. hosts and delivers the application. It handles data in transit and request logs.

Anthropic, PBC provides the AI features. Some send case note text with the participant’s name, email and phone removed. The help assistant receives only the question typed and published help content. An organization can switch most AI features off.

Resend, Inc. sends transactional email such as invitations and alerts. It receives the recipient’s email address and the message.

Stripe, Inc. handles subscription billing. It receives billing contact and payment details. No participant data.

The current list is published on our Subprocessors page, and customers get 30 days notice before a new one starts.

Reference lookups

The product looks things up in two public government sources. Information flows inward. No customer or participant data is sent to them.

CareerOneStop, operated by the U.S. Department of Labor, for training provider and career resource lookup. Search terms only, such as occupation and location.

findtreatment.gov, operated by the Substance Abuse and Mental Health Services Administration, for treatment facility lookup. Search terms only.

Referrals to other organizations

When an organization refers a participant to an outside provider, that provider opens a link. What the link shows is the participant’s first name and last initial, the service being requested, the referring organization and how to reach it, the worker to reply to, and the date help is needed by where one was set.

What it does not show: date of birth, contact details, any identifier, assessment scores, any of the twelve domains, case notes, or any other program or referral.

The link expires, and the first time it is opened is recorded. Every referral records the consent it relies on, or an explicit override with the person who made it and the time.

The organization receiving a referral is usually not a Lift Right customer and has no agreement with us. It receives what the referring organization chose to send. That organization decides to refer, holds the consent, and is responsible for whether the disclosure is lawful. We provide the channel, keep what is sent to a minimum, and record what was sent and when it was opened.

Nobody else

We do not sell personal information, and we do not share it for cross-context behavioural advertising. There is no opt-out to offer because there is nothing to opt out of.

If a court or agency compels disclosure, we will give the customer notice where the law allows it, disclose only what is required, and ask for confidential treatment.

The in-application assistant

Lift Right includes an assistant, called Delmar, that answers questions about how to use the product. It is provided by Anthropic.

It cannot read participant records. It has no route to them at all, rather than a restricted one. It reads three published tables of product help, design rationale, and field practice. What reaches Anthropic is the question typed, the recent questions in the same conversation, and published help content.

Anthropic does not use this content to train its models. It deletes inputs and outputs within 30 days. Content its usage policy classifiers flag may be held up to 2 years, and feedback a user submits up to 10 years.

The assistant does not answer legal or compliance questions, does not make decisions about a participant, and does not determine eligibility, benefits, or service assignment. Every conversation is logged to the organization’s own account.

What the design does not prevent is what someone types. The system will never send a participant record to the assistant. It cannot stop a caseworker typing a participant’s name and situation into the question box. Staff should be told not to, and we are adding that reminder at the point of entry.

Lift Right does not make or substantially inform decisions about any participant. It presents information. A person decides.

Security

What Lift Right does today, stated without exaggeration:

• Every table carrying customer data enforces row-level access control in the database, so a user cannot read another organization’s records even if the application layer is bypassed.
• Data is encrypted in transit and at rest.
• Access within an organization is limited by role and by caseload, so a caseworker sees the participants assigned to them rather than everyone.
• Every disclosure to an outside party is recorded with its legal basis, the named recipient, the purpose, what was disclosed, and whether onward sharing was permitted.
• Funder reports are aggregate. No individual is named or identifiable in a generated report.
• Privileged actions and cross-organization access attempts are logged.
• Privileged actions, disclosures, and participant-level events are recorded.

Our Security page describes how access, disclosure, and reporting are controlled. Buyers and reviewers who need the full written description of our controls can request it at security@getliftright.com.

How long we keep it

Customer data is retained according to a policy the customer configures, within any period its own funders or the law require.

On termination, data is exportable for 30 days and then deleted, except where a funder rule or legal obligation requires longer, in which case it is kept for that period and then deleted.

Your rights

If you are a participant

Your request goes to the organization serving you, not to us. We hold your record on their instructions and we cannot verify who you are. They know you, they hold your consent, and they decide what their own funder rules require them to keep.

We will help them find, correct, export, or delete a record. If you contact us directly, we will pass your request to them within 5 business days and tell you we have done so.

If you are staff at a customer organization

About your own account information, you may ask to know what we hold and why, get a copy in a portable form, correct what is wrong, delete your account subject to your employer’s own decision to keep the record of who did what, and object to use of your information beyond running the service.

We respond within 45 days, and may extend once with notice where state law allows. If we say no, we will tell you how to appeal, and Colorado requires the appeal route to be in the refusal itself. We verify identity against the account, and we refuse a request we cannot verify rather than guessing. Nobody is treated worse for exercising a right.

An authorized agent may make a request with proof of authority.

Write to privacy@getliftright.com.

Children and young people

Human services organizations serve minors, so the usual line about not knowingly collecting information from anyone under 13 would be both false here and beside the point. The real position:

Participants may be minors. Records about a minor are entered by the organization’s staff, not by the minor, and that organization is responsible for obtaining any consent its own rules, its funders, or state law require.

Where an organization enables participant-facing intake, that organization decides whether a minor may complete it unaccompanied under the law of its state.

Lift Right does not direct any service to children or collect information from children for its own purposes.

Where the information is

Stored in the United States. Text sent to an AI feature may be processed by Anthropic in another country before the result comes back. The service is offered for use in the United States.

Breaches

If there is a security incident affecting a customer’s data, we tell that customer without undue delay and no later than 72 hours after confirming it, and we say what happened, what data was involved, what we have done, and what they need to do.

Changes

We will post changes here. Material changes take effect 30 days after we tell customers, and a customer who objects may terminate before then. We will not make our practices less protective of information already collected without saying so.

Questions about this policy: privacy@getliftright.com

*Effective October 8, 2026. Content version 2026-08-12-a.*