Skip to content
Ferryway

Privacy policy

We collect as little as the work allows — and we say exactly what that is.

Effective November 12, 2026. This policy covers this website and the signed-in Ferryway network — it is written to be read, not skimmed past.

Privacy policy details

The short version

We collect what you hand us — a form you submit, an email you send, and the work information professionals enter to coordinate placements — plus ordinary server logs. There are no third-party analytics or advertising trackers. We never sell your information. And patient or health information should never be sent here at all: the network is built to work without it.

What this policy covers

This policy is from Ferryway LLC, an Arizona limited liability company. It covers the public Ferryway website and the Ferryway service — the invite-only, signed-in network where facilities publish bed availability and professionals send and answer placement referrals. If your organization has a separate signed agreement with us, that agreement also applies.

What we collect on the website

  • Contact form: your name, organization, email address, role, and the message you write. It is delivered to our team inbox by email.
  • Access requests: the details you provide about your organization — its name, type, city and county, a contact name, work email and phone, any notes and references you add, and the licence or registration numbers we use to verify it (for example a state licence number, NPI, or agency identifier). These are stored so we can review and verify the request.
  • Abuse prevention: when you submit a form we keep a one-way hash of your IP address and email address for about a day, solely to limit repeated submissions. The hash cannot be turned back into the original value.
  • If you email us at markovanzyl@ferryway.net: we receive what you choose to send. We use it only to respond and to follow up on your inquiry.
  • Hosting and server logs: like nearly every website, our hosting infrastructure generates standard, short-lived server logs (such as IP address, user agent, and requested page) for security and operations. We do not use these to profile visitors.

What we collect in the service

Everything in the signed-in network is information about organizations and the professionals who work for them.

  • Account details: your name, work email, role, and the facility or organization you belong to. Passwords and multi-factor sign-in secrets are held by our authentication provider; we never see your password.
  • Organization and facility details: names, locations, intake phone numbers and hours, levels of care, intake requirements, and a contact person.
  • Bed availability: the counts each facility reports, with the time of each update and the account that made it.
  • Referrals: an anonymous case reference, the referring professional's name and organization, a professional call-back name and phone number, the level of care requested, requirement tags, an optional note between professionals, and the status history of the referral.
  • Activity log: a record of significant actions in the service — who did what, and when — kept for security and accountability.
  • Subscription details: seat counts, billing interval, and the billing contact for an organization.

Health information — a hard line

Neither this website nor the service is a place for patient information. Referrals are designed to carry no name, date of birth, contact detail, diagnosis, or other detail that identifies the person being placed, and users agree not to enter any — in a form, a referral note, or an email to us. If we find patient information in the service, we may remove it. Ferryway is not a provider of medical care, and nothing here creates a treatment relationship.

If you or someone you're with is in crisis, call or text 988 (Suicide & Crisis Lifeline) or call 911.

How we use what we collect

  • To respond to your inquiry or access request.
  • To verify that organizations requesting access are who they say they are.
  • To provide, maintain, secure, and support the Ferryway service for your organization.
  • To send service email: invitations, onboarding and account messages, and reminders to keep availability current. We do not send marketing email to accounts.
  • To measure how the network is working, using first-party figures computed from the service's own records.
  • To bill for the service, and to meet legal, tax, and accounting obligations and enforce our terms.

Who can see it

  • Other participants: the network exists to share some information between verified organizations. A facility's listing and reported availability are visible to signed-in participants. A referral, including the referring professional's name and call-back contact, is visible to the sender and the receiving facility.
  • Your organization: administrators of your facility or organization can see its accounts and its activity.
  • Ferryway staff: our network administrators can see service records in order to verify organizations, support users, and keep the network secure.
  • Legal requirements: we may disclose information if the law requires it, or to protect the safety of people or the security of the service.

We do not sell, rent, or trade personal information — full stop — and we do not share it with third parties for their own marketing.

Vendors that process data for us

We share information only with the vendors that operate the service on our behalf, and only as needed for them to do that work.

Vendors that process data for Ferryway, and what each does
VendorWhat it does
CloudflareHosts and delivers the website and the service, and produces the server logs described above.
SupabaseStores the service's database and handles sign-in, passwords, and multi-factor authentication.
ResendSends our email: invitations, account and onboarding messages, reminders, and contact-form messages to our team.
StripeProcesses card payments where online payment is offered. Not yet in use on this site.

Payment processing

Online card payment is not yet enabled, so no card or payment data is collected through this site today; subscriptions are billed by invoice. When card payment is offered, it will be processed by Stripe: card details will go directly to Stripe, and Ferryway will never see, receive, or store a full card number. We will update this page before that happens. Billing, renewal, cancellation, and refund terms are set out in our Refund & Cancellation Policy.

Cookies

We use only a strictly-necessary cookie — the one required to keep you signed in. No analytics or advertising cookies are used, and no third-party analytics or advertising trackers run on the website or in the service. Because we set nothing that tracks you across sites or measures your behavior for marketing, there is no consent banner to click through — this is a disclosure, not a request for permission.

Cookies used by Ferryway, with purpose and category
CookiePurposeCategory
sb-*-auth-tokenSet by our authentication provider to keep you signed in to the Ferryway network after you log in. Set only once you sign in — browsing the public site never sets it.Strictly necessary

How long we keep it, and deleting it

  • Inquiries and access requests: kept while we are in contact with you and for a reasonable period afterward, then deleted.
  • Accounts: kept while the account is active. When a person leaves or an organization stops using Ferryway, the account is deactivated, and we delete or de-identify its personal details on request.
  • Referral history and the activity log: kept as the working record of the network. The activity log is append-only by design, so entries in it are not edited or removed on request; they contain work identities, never patient information.
  • Billing records: retained as long as required by tax, accounting, and audit obligations, which is typically several years after the final transaction.
  • Abuse-prevention hashes and server logs: short-lived. Form hashes are deleted after about a day; server logs rotate on our hosting provider's standard schedule.

You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email markovanzyl@ferryway.net and we will respond. If your account belongs to an organization, we may need to involve its administrator. We may need to keep records we are legally required to retain, and we will tell you if that applies.

Security

Data is encrypted in transit and at rest. Access inside the service is limited by role and by organization, enforced in the database itself, and significant actions are logged. No system is perfectly secure; if we learn of a breach affecting your information, we will notify the affected organizations as the law requires. More detail is on our Security & Compliance page.

Governing law

Ferryway LLC is an Arizona limited liability company, and the service is offered to organizations in the United States. This policy and any dispute arising from it are governed by the laws of the State of Arizona, United States, without regard to its conflict-of-laws rules.

Changes to this policy

If our practices change — for example, when online payment opens or we add a vendor — we will update this page and its effective date before the change takes effect. The history of this policy is available on request.

Contact

Questions about privacy? Email markovanzyl@ferryway.net.

Ferryway LLC, an Arizona limited liability company