Healing Tek LLC · Updated October 30, 2026

Your information, handled with care.

Effective October 30, 2026. This describes how Healing Tek LLC handles information through StableSteps. Feature availability may differ between the public service and invited previews.

Who operates StableSteps

Healing Tek LLC operates StableSteps, Address Check and Text It. Contact [email protected] with privacy questions or requests.

Address checks and location

Basic browser checks can work without an account. Addresses and coordinates are sent to mapping and geocoding services to locate places and estimate distances. Browser history is stored on your device. Signed-in checks and text features also use server records for access, usage and service operation. Selecting current location or Live shares location while that feature runs; turn it off and revoke browser location permission to stop further location checks.

Accounts and workspace records

We process email addresses, sign-in codes, sessions, membership and access roles. A participating organization may enter resident profiles, housing and bed assignments, schedules, referrals, applications, releases, messages, payment receipts, documents, and sensitive health or registry notes. Enter only information necessary for your authorized work. Director permissions restrict health and registry notes; permissions are a safeguard, not a promise that every use is appropriate.

Housing Possibilities

We store your search preferences, imported listing links, details you enter and screening summaries under your account. Removing a possibility deletes that saved database record, subject to backup limits. Listing emails, when connected, are treated only as untrusted data; attachments and email instructions do not control your account. The importer extracts supported listing links rather than keeping the full email body.

Sharing and service providers

Organization members see records according to their roles. Officer and referral-partner access requires the resident release and access rules implemented in the workspace. Records can also be shared when you request it or as legally required. We do not sell personal information. We use Cloudflare for hosting and storage, Resend for sign-in email, Stripe for payments, and Twilio for connected texting. Map providers include OpenStreetMap/Nominatim, Photon, Overpass operators, Census and government or Esri-hosted geographic services. A check sends an address or search area to these providers. External map and verification links send you to their sites; external font services may receive connection information.

Housing-email forwarding and the next-step guide

The connected housing-email pilot accepts manually forwarded messages from the email used to sign in, through a private account-specific forwarding address. We check sender authentication, extract up to five supported direct listing links, save the listings and derived screening results, and send the results to your account email. We store delivery/job status and short-lived credential digests for processing and abuse prevention; we do not retain the full forwarded body or attachments as part of this importer. The account-specific forwarding address should be kept private. Resend delivers sign-in and screening-result emails. Paid upgrade purchasing is not currently enabled.

The public My next step guide does not collect private answers to its conversation questions. Address Check's Yes/No/Not sure answer, local check history and housing-search budget can be saved on your device. Opening Zillow, Apartments.com or another external service takes you to its own site and privacy practices. Search links are not an automatic data feed or a confirmed housing match.

Payments, messages and operational records

Stripe collects payment details on its own checkout. We store payment references and subscription status rather than full card numbers. Texting processes telephone numbers, message content, consent/opt-out state and usage. Hosting and security systems may process IP addresses, request metadata, audit and rate-limit records. Texting remains pending carrier approval; no live Text It purchase is offered.

Retention and deletion

Browser records remain until you clear them or browser storage. Server records do not have a single automatic deletion deadline; a complete automated retention and purge program has not been implemented. We review deletion requests manually, subject to identity verification, organization responsibilities, payment records, legal requirements and backup limits. Clearing browser history does not delete server records. Ask us what can be removed before entering sensitive information.

Your choices and security

You can revoke location access, clear local history, request access/correction/deletion by email, and contact your organization about its records. STOP ends text delivery; it does not cancel a paid subscription. Use account billing controls or contact us to cancel billing. Do not send card details, passwords or sensitive case information by ordinary email or text. Access controls and provider security reduce risk, but no system guarantees confidentiality. StableSteps has not been represented as HIPAA certified or as providing end-to-end encryption.

Changes and screening sources

Material changes will be described with a revised policy date. Review screening sources and limitations before relying on a result. Do not submit victim identities or private addresses of other people to try to resolve a personal restriction.

Optional one-time safety guide

If you choose the safety-guide email, we send general guidance only to your verified sign-in email through Resend. We record your request and guide version in our private audit log, and use rate limits and a sending identifier to limit duplicates. The guide has no class locations, schedules or participant lists. Requesting it does not enroll you in a program or subscribe you to recurring messages. You do not need to provide your name, registry status or identity documents for this guide. Registry verification and program-directory access are no longer offered in this flow. Any prior review records, if present, remain restricted under our retention and deletion process; they are not published.

Optional private distance guidance by email

If you request the question and agree to the terms, we email it to your verified sign-in address with a private reply address. Reply YES or NO directly to that email within 24 hours. We accept only the same authenticated sender, a clear first-line answer, and no attachments. We retain the answer, audience selection, consent/request times, protected reply-address and processing credentials, delivery state and a limited audit trail. We do not save the full reply body or quoted thread in our application database; email providers may process and retain messages under their own policies. YES triggers a five-digit PIN email. NO triggers a general housing confirmation and clears personalized web access. PINs are stored as protected digests, expire after ten minutes, allow five attempts and work once in the signed-in account. Successful entry grants seven-day access. This does not verify identity, registry status or applicable legal restrictions. No registry search is performed. Neutral subjects do not protect message contents from someone who can access your inbox. Text It keeps its existing process.

Public resource finder

The resource finder works without an account. State, city/ZIP and category filters run in your browser. Device location is optional and stays in memory on that page. Opening a map link shares the search location and category with Google; external directories and providers have their own privacy policies. Published employment and reentry-support contact details come from public CareerOneStop directories and can become outdated. An email/share link opens a draft in your email app without choosing a recipient; StableSteps does not send that draft or add you to a mailing list. No private case details are added to resource searches or drafts.

History on shared devices

New saved web-check history and the last entered address are separated by signed-in account in this browser. Signing out hides the private view and clears its current in-memory data; it does not erase your saved account history. Older unscoped device history, if present, is preserved but is not automatically displayed as another account’s history. Browser storage is not a substitute for device security: someone with access to the browser profile may inspect it. Use a device you control and clear site storage when appropriate.