In one paragraph
Guardians of Solano collects the minimum information needed to connect a person in crisis with verified help. We never sell your information. We never share it with law enforcement, immigration enforcement, or any third party without your consent or a lawful court order. Domestic-violence survivors' records are handled by partner victim-service providers, not by us. You can request export or deletion of your data at any time.
Who runs this site
Guardians of Solano is operated by Catalyst Investments LLC, a California limited-liability company, pending the issuance of a separate 501(c)(3) tax-exempt entity for ongoing operations. Aaron Turner is the founder and lead operator; Anadora Turner, MSW (USC), LCSW co-leads field validation.
Contact: hello@guardiansofsolano.com
What we collect
- Identity: name, email, optional phone number, date of birth (only when required for a coordination packet).
- Account state: tier level (0-4), partner verifications, attestations, your earn history, your credit balance.
- Donations: donor name, email, donation amount, Stripe payment-intent ID, optional marketing-consent flag.
- Coordination-packet drafts: form answers you enter at
/docs, the signature image, the generated PDF. - Device + browser: IP address, browser type, session cookies needed to keep you signed in.
- SMS metadata (if you opt into SMS): your phone number, message timestamps, opt-out keyword status.
SMS communications (opt-in only)
By providing your mobile number to Guardians of Solano (in account creation, partner verification, event signup, or elsewhere), you agree to receive transactional SMS messages from us. Message types include:
- One-time sign-in codes (account access)
- Credit issuance notifications
- Event eligibility alerts (only events you qualify for)
- Account-status updates
Message frequency: variable; typically fewer than 4 messages per month per recipient.
Message and data rates may apply. Check with your carrier.
To stop receiving messages: reply STOP to any Guardians of Solano SMS. Your number is removed within 24 hours and you will receive no further transactional SMS from us (you may still receive emails if you have an account).
For help: reply HELP to any Guardians of Solano SMS, or email hello@guardiansofsolano.com.
Carriers are not liable for delayed or undelivered messages.
HIPAA-protected health information
In Phase 0 (current), Guardians of Solano does not receive Protected Health Information (PHI) directly. When and if we do — as a coordination layer receiving discharge data from county Behavioral Health, a jail medical contractor, or a hospital discharge planner — we would operate as a Business Associate under 45 CFR 164.500(c) and the HITECH Act. PHI handling would be governed by an executed Business Associate Agreement (BAA) with each covered entity before any data exchange. No PHI would be collected, transmitted, or stored without an executed BAA. Planned audit-log retention: 6 years per 45 CFR 164.316(b)(2), 10 years where Medi-Cal/CalAIM contracts require longer.
Domestic-violence survivor records
Guardians of Solano does not retain DV-survivor records. We are not a data controller for VAWA-protected information. DV-survivor records live in a Comparable Database operated by the Family Justice Center / SafeQuest under 24 CFR §578.103(b), governed by VAWA 34 U.S.C. §12291(b)(2) (formerly §40002(b)(2)), FVPSA 42 U.S.C. §10406(c)(5), and VOCA confidentiality requirements.
If you are a survivor seeking help, call SafeQuest Solano at 1-866-487-7233, Family Justice Center Solano at (707) 784-7635, or the National DV Hotline at 1-800-799-7233.
42 CFR Part 2 (substance use treatment records)
In Phase 0 (current), Guardians of Solano does not receive SUD treatment records. If and when we receive such records from DMC-ODS providers (Partnership HealthPlan, CalAIM Justice-Involved Reentry), they would be handled under 42 CFR Part 2 as amended February 16, 2024. That would require a written treatment-payment-operations consent meeting §2.31 form requirements, segregation of SUD counseling notes behind separate consent, logging of every redisclosure, and propagation of the Part 2 prohibition-on-redisclosure notice to downstream recipients.
What we do with your data
- Coordinate services with verified Guardians of Solano partner businesses
- Issue and redeem credits within our partner network
- Send transactional emails and (with opt-in) SMS
- Produce coordinated outcome reporting for county/state funders (de-identified or aggregate only — never individual records)
- Improve the service based on usage patterns (also de-identified)
What we do NOT do with your data
- We do not sell your information to anyone for any purpose.
- We do not share your individual record with law enforcement, immigration enforcement, employers, landlords, or insurance companies. (We comply with lawful court orders if served.)
- We do not use your information for advertising or profiling.
- We do not allow donors who fund credits for a specific person to see that person's identity.
California Privacy Rights (CPRA)
We do not sell or share your personal information for cross-context behavioral advertising as defined under the California Privacy Rights Act (Cal. Civ. Code §1798.100 et seq.). California residents may exercise their rights under CPRA by contacting us at hello@guardiansofsolano.com.
Sensitive personal information: When we collect sensitive personal information (as defined under Cal. Civ. Code §1798.140(ae)) — including health-related coordination data or demographic information you provide — we use it only to provide the services you have requested. We do not use sensitive personal information for inferring characteristics about you or for other secondary purposes. California residents have the right to limit our use of their sensitive personal information; contact hello@guardiansofsolano.com to exercise this right.
Your rights
- Right of access: request a copy of all data we hold about you.
- Right of deletion: request that we delete your records, subject to HIPAA/CalAIM retention requirements where applicable.
- Right of correction: request that we correct inaccurate information.
- Right to opt out of SMS: reply STOP at any time.
- Right to pause your account: contact us to suspend your account without deleting it.
To exercise any right, email hello@guardiansofsolano.com. We respond within 30 days.
How we secure your data
- TLS 1.3 in transit. AES-256 at rest (Supabase-managed).
- Postgres Row-Level Security at the database boundary.
- Append-only, hash-chained audit log for PHI access — planned for implementation before any BAA is executed.
- Break-glass oversight access with reason code and record-owner notification — planned alongside PHI integration.
- Incident response within 60 days per HIPAA Breach Notification Rule — applicable once PHI is in scope.
Cookies and tracking
We use only the minimum cookies needed to keep you signed in and to remember your language preference (English or Spanish). We do not use third-party advertising trackers, Google Analytics, or cross-site behavioral tracking.
Children
Guardians of Solano does not knowingly collect personal information from children under 13. Minors may appear in coordination packets only when an authorized adult (parent, guardian, or social worker) is also the account holder.
Changes to this policy
We may update this policy as the service evolves. The "Last updated" date at the top of this page reflects the most recent change. Material changes will be announced via email to account holders and posted on the homepage.