01
Who this draft covers
This draft describes information handled through The Capri Collective’s website at capricollectiveco.com, including business inquiries, self-reported assessments, Capri Practice Partners and the Capri Wish List. It is not a notice for patient care, an EHR or records exchanged under a separate client engagement.
The legal entity responsible for this website still needs confirmation. Our business mailing address is 3133 Maple Dr NE, Ste 240 #1271, Atlanta, GA 30305. This is a mailing address, not a walk-in or meeting location. Questions about this draft may be sent to the contact address below.
02
Information you provide
Depending on the form, we collect your name, email address, organization, role or job title, industry or healthcare specialty, state, phone number and preferred contact method. Forms also ask for service interests, timing and a description of your business needs. Required fields vary; some contact details and comments are optional.
Discovery-call intake collects your full name, work email, optional phone number, organization or practice name, organization type, selected service interests, operational priority and optional additional information. This intake is stored as a separate inquiry, not a confirmed appointment. When a Google Calendar booking link is available, Google collects scheduling information on its own booking page; website intake responses are not automatically transferred or associated with a booking.
Specialized forms may collect organization size, locations or provider counts, current systems, selected support needs and self-reported operational answers. Assessments include your answers and a preliminary response-based summary. Practice Partners also asks about BCBA status, practice vision, current caseload, contracting preference, support interests, the Capri service package of interest, your current practice-management platform, whether you are an ABA Engine customer, your practice stage and goals.
Facilities inquiries collect organization contact details, industry, location count, service area, needs and project timing. Facility reviews collect maintenance, vendor, expense, documentation and disruption answers. Preferred Partner applications ask for business contact and service-area details, trade, years in business, license and insurance status, technician count, availability, experience and business references; no documents are uploaded through these forms. Requests and contact permission are stored privately and grouped with existing lead profiles. Owner emails identify the request and link to private administrator review rather than including complete answers. These forms do not enroll applicants in marketing emails.
The Wish List collects exactly three ranked wishes, optional custom wording, barriers and what success would look like. Optional sharing can include organization characteristics and contact details. Submitted records include submission identifiers, timestamps and associated permissions.
Short clinic ownership inquiries collect first and last name, email, optional phone, state, practice stage, discipline and optional business notes. Optional ownership-update consent is recorded separately with its wording, version and timestamp; it does not activate a marketing subscription. State Medicaid rate requests collect name, email and location. An optional, separate release-notification choice and its wording, version and timestamp stay with that private request and do not authorize general newsletters.
03
How information is used
Submitted information helps us understand your business needs, respond using your contact details, prepare preliminary summaries and discuss potential services. Submission identifiers help prevent duplicate saves and notifications. Validation, spam-trap fields and, on some forms, hashed network/email identifiers help protect against abuse.
Organizational assessment inquiries record organization type, help category, optional organization size, states and website, source page, and a separate optional marketing choice with its wording, version and timestamp. Newsletter interest requests record email, optional organization type, and consent evidence. One normalized-email contact profile groups submission history; marketing remains inactive pending provider connection, confirmation and activation approval. Assessment free-text descriptions remain private and are not included in owner email notifications.
Wish List submissions shared with permission also support private business-priority insights. Permission to save Wish List responses is separate from permission to contact you. Any additional newsletter, advertising or broader marketing use must be confirmed before this policy is finalized.
04
Private storage and email delivery
Accepted inquiries and assessments are saved in private website records in Lovable Cloud before an owner notification is attempted. General contact and several specialized inquiries use a shared contact record; other assessments and specialized forms have their own private records. Submission details or summaries are included in email notifications to hello@capricollectiveco.com, or to careers@aokservices.org for Join Our Team introductions. Your email may be used as the reply-to address.
A failed email notification does not undo a saved submission. Confirmations distinguish a saved record from a sent notification. Reusing the same submission identifier does not create another record or notification. Receiving-mailbox copies are separate from website records and may remain even if a website record is removed.
Access controls restrict public access to submission records. Wish List reporting requires authorized administrator access; it is not a public directory. Authorized operations and service providers may process information to run the website, store records and deliver email. No online system can guarantee absolute security.
05
Shop purchases and downloads
Free-resource requests collect first name, email address and professional role, plus an optional organization name. The required resource-license acknowledgment is recorded with its version and timestamp; the license is a draft awaiting legal review. Requests are saved privately before a resource email is sent. Optional permission to receive Capri insights, tools and updates is stored separately with its exact wording, version and timestamp, defaults to unchecked, and is not required for delivery. No customer account or payment is required. This permission does not automatically enroll you in a marketing service.
Free files remain in private storage and are delivered through signed links that expire seven days after the request. You can request a fresh link. A request is not confirmed as emailed unless sending succeeds. Request records and separately recorded consent do not have an approved retention schedule yet.
When you buy a resource, we record the email address you enter at checkout, the product and price, the payment amount and currency, payment-provider identifiers for the checkout session, customer and order, and delivery timestamps, so the purchase can be fulfilled and support can help if a download fails. Payment card details are entered on the payment provider’s secure form and are not collected or stored by this website.
Purchased files are kept in private storage. Each purchase generates a unique download link, and a file is released only when that link matches a recorded order; purchased files are not publicly listed or discoverable. An order can be re-delivered to the address used at checkout.
The payment provider processes payment, retains its own records under its terms, and sends the website payment-status notifications that trigger delivery. The provider’s privacy practices and retention periods need confirmation. Refunds and disputes follow the provider’s process and the policy stated on the product page.
06
Your Wish List choices
You can view Wish List results without providing personal details or saving a submission. With permission, you may save responses for discovery and business-priority insights, email the results to yourself, or request a conversation.
Email-to-self sends results to the address you provide. A contact request stores the contact information you choose to share and notifies the Capri inbox. Permission to save responses alone does not authorize follow-up contact. Wish List responses are not sent by the application to advertising analytics.
07
The For Families experience
Provider search asks for name, email and contact permission before showing results. ZIP code, category and distance are saved with that private search request; the browser remembers completion of this step. No account is required. Published listings include public CMS NPPES registry records with listing details not yet independently verified, alongside staff-reviewed updates. A taxonomy code or registry entry never proves pediatric services, current practice location, licensure standing, insurance participation or autism-evaluation services, and listings are informational only—not clinical endorsements, quality ratings or referrals.
Provider listing claims collect the claimant name, role, work email, optional phone and a description of their authority over the practice. Claims are verified by our team before any listing is changed or receives a verified designation; providers can also request corrections or removal.
Family inquiries collect parent or guardian name, email, optional phone, preferred contact method, ZIP code, state, the services you select, an optional provider selection, an optional insurance company name and an optional message. Contact consent is required to submit; a separate, optional permission lets us share inquiry details with independent providers you selected or that appear to fit the care you are looking for, and is recorded with its wording and version. Please do not include medical records, diagnoses, insurance member IDs or card images; general inquiry forms are not appropriate for those documents.
Benefits, superbill and reimbursement requests collect the same contact basics plus an optional insurance company name and description of needs. Your treating provider verifies all clinical information, diagnosis codes, service dates, procedure codes and credentials; submissions happen only with appropriate authorization, and reimbursement is never guaranteed.
Family inquiries and service requests are saved in private website records before owner email notifications, are visible only to authorized administrators, and actions on them are recorded in an internal audit log. Family information is not sold, is not exposed through public directory interfaces, and provider connections are never conditioned on purchasing Capri services.
08
Calculators and the AI Service Guide
Calculator inputs and results are calculated in your browser and are not submitted merely by using a calculator. Some tools can prefill an inquiry with a summary you choose to carry forward; that summary becomes part of the submission if you send the form.
The independent ABA earnings report is generated and downloaded in your browser from your selected location, rates, assumptions and estimates, without email registration. A separate state-rate request sends only that form’s contact details, requested location and optional release permission; it does not send your calculator assumptions.
The AI Service Guide is different: the business-needs description you enter is sent through the Lovable AI Gateway to an AI provider to suggest a relevant Capri service. The application does not automatically save it as an inquiry and requests processing with storage disabled. That setting does not establish gateway or provider log and retention practices; those terms need confirmation. Do not enter confidential or patient information.
09
Browser storage and technical information
The website uses browser storage to remember dismissal of the Wish List invitation for 30 days. Sign-in services persist authentication sessions for private administrator access. External font and image services receive network requests needed to load those resources.
Hosting, security, sign-in, email and AI services may process technical information such as IP addresses, browser or device details and request or delivery logs. The complete deployed cookie and provider-log inventory has not yet been verified. No dedicated advertising pixel or analytics integration was identified in the reviewed application code; this is not a guarantee that providers collect no telemetry.
11
Retention and privacy requests
A specific retention schedule has not yet been approved, and the reviewed inquiry workflows do not show automatic age-based deletion. Website records, mailbox copies, backups and provider logs can have different retention periods. The final policy needs applicable periods or criteria and legally required exceptions.
To ask about information you submitted, request correction or deletion, or withdraw permission for future follow-up, contact us below. Avoid including sensitive information. Identity verification may be needed to protect your records. Available legal rights, deadlines and exceptions depend on applicable laws and require confirmation. This draft does not promise immediate or complete deletion from every backup or provider system.
12
Business inquiries—not patient records
Do not submit protected health information, patient names, diagnoses, insurance or claim identifiers, Social Security numbers, tax identification numbers, banking details, confidential personnel records or sensitive documents through public forms, the AI guide or ordinary inquiry email. Use anonymous totals and non-sensitive business context.
These forms are directed to business representatives and professionals, not children seeking care. References to caseloads or children in website imagery do not mean we ask for children’s personal information. Patient-related exchanges in an actual engagement require separately agreed appropriate safeguards. This draft is not a HIPAA Notice of Privacy Practices or a claim that public forms are suitable for PHI.
13
Draft status and future changes
This is a draft based on website workflows reviewed on October 23, 2026—not an approved legal policy. The owner-confirmation list identifies material details still needed. After review, the approved policy should state an effective date and reflect changes to forms, providers, tracking or business practices.