Privacy Policy

1. Introduction

Caretum Health ("Company," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our healthcare staffing marketplace (the "Platform"), which connects healthcare professionals, facilities, and other users of our platform.

Please read this Privacy Policy carefully. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information that you provide directly to us, including:

• Account Information: Name, email address, phone number, password
• Professional Credentials: License numbers, certifications, and other credentialing documentation required for your healthcare role
• Identity Verification: Government-issued ID (front and back photos), selfie photo for identity verification, Social Security Number (for tax purposes), background check consent, date of birth, mailing address (including apartment/unit number)
• Emergency Contact: Emergency contact information
• Facility Information: Business name, address, license number, insurance details
• Financial Information: Bank account details, payment preferences, tax information
• Profile Information: Profile photos, bio, skills, availability preferences

2.2 Information Collected Automatically

When you use the Platform, we automatically collect:

• Device Information: Device type, operating system, unique device identifiers
• Usage Data: Pages visited, features used, time spent on Platform, click patterns
• Location Data: GPS coordinates collected during clock-in and clock-out events for shift verification; IP address
• Performance Scores: Shift completion data and performance score calculations
• Cookies: Cookies and similar tracking technologies
• Log Data: Access times, error logs, referring URLs

2.3 Information from Third Parties

We may receive information from third parties, including background check results (through Checkr), license verification data from Oregon licensing boards, and payment processing data.

3. How We Use Your Information

We use your information to operate the Platform and deliver our services. Specifically, we use your information to match healthcare professionals with available shifts at facilities using our proprietary matching system, verify your identity and professional credentials, process payments for completed shifts, communicate with you about shifts and other platform notifications, and improve our services based on usage patterns. We also monitor credential expiration dates and send renewal alerts, calculate and maintain performance scores that influence platform standing, generate anonymized analytics to improve the platform, comply with legal obligations and healthcare regulations, and prevent fraudulent or unsafe activity.

4. Information Sharing and Disclosure

4.1 With Other Users

When a Professional claims a shift, the Facility receives the Professional's name, credentials, photo, and performance score. When a Facility posts a shift, Professionals see the facility name, location, and shift details.

4.2 With Service Providers

We share information with third-party service providers who perform services on our behalf, including background check providers, email communication services, payment processors, cloud hosting providers, and analytics services. These service providers are contractually obligated to protect your data and use it only for the purposes specified.

4.3 Legal Requirements

We may disclose information if required by law, court order, governmental regulation, or government request, or to protect the rights, property, or safety of Caretum Health, our users, or others.

4.4 Business Transfers

User information may be transferred as a business asset.

5. Location Data

We collect GPS coordinates during clock-in and clock-out events to verify that Professionals are at the correct facility. Location data may also be used as evidence in shift hour dispute resolution. Location data is not continuously tracked between clock-in and clock-out events.

You may disable location services in your device settings, though this may limit Platform functionality. Revoking location permissions will prevent us from accessing your GPS coordinates for clock-in verification.

6. Data Retention

We retain your information as long as your account is active or as long as necessary to provide our services. We comply with Oregon record retention requirements for healthcare staffing agencies and Fair Credit Reporting Act (FCRA) requirements for background check records, which may require retention for extended periods to fulfill legal obligations.

7. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit and at rest, secure authentication mechanisms, regular security assessments, access restrictions on sensitive data, and incident response procedures. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security of your data.

8. YOUR RIGHTS (OREGON CONSUMER PRIVACY ACT)

Under Oregon law, you have the following rights regarding your personal information:

• Right to Know: You have the right to know what personal information we collect about you
• Right to Access: You can access your personal information through your account settings or by contacting us
• Right to Correct: You may request correction of inaccurate information
• Right to Deletion: You may request deletion of your account and associated data, subject to legal retention requirements and exceptions
• Right to Opt Out of Data Sales: You have the right to opt out of the sale of your personal information. We do not sell personal information
• Right to Non-Discrimination: You will not be discriminated against for exercising any of these rights

To exercise these rights or for other privacy-related questions, please contact us at support@caretumhealth.com.

9. Communications

We send you transactional communications including shift confirmations, payment notices, and legal updates that are essential to your use of the Platform. These transactional communications cannot be opted out of. You can opt out of marketing and promotional communications by adjusting your notification preferences or clicking “unsubscribe” in marketing emails.

10. Children's Privacy

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will delete it promptly.

11. Changes to This Privacy Policy

Material changes to this Privacy Policy will be communicated to you via email and Platform notification. Continued use of the Platform after changes take effect constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

For privacy inquiries, please contact: