Privacy Policy

We collect the following categories of information:

• Account Information: Name, email address, phone number, password, and role selection (Employer or Worker).
• Professional Credentials: License numbers, issuing state, license type, certifications, expiration dates, and supporting documentation.
• Business Information: Company name, NPI number, EIN, AHCA license number, employer type, address, and contact person details (for Employers).
• Payment Information: Payment details are processed via Stripe. ShiftCura does not store credit card numbers, bank account numbers, or other sensitive financial data on its servers.
• Usage Data: Shifts posted, shifts accepted, platform interactions, reliability metrics, and earnings data.
• Device & Technical Data: IP address, browser type, device type, operating system, and geolocation data (when you enable clock-in features).

We use the information we collect to:

• Operate the Platform: Create and manage accounts, facilitate shift posting and acceptance, and manage user profiles.
• Match Workers with Shifts: Use role, credentials, availability, and location data to surface relevant shift opportunities.
• Process Payments: Facilitate escrow, payouts, refunds, and subscription billing through Stripe.
• Send Notifications: Deliver shift confirmations, payment updates, credential status changes, and platform communications.
• Verify Credentials: Validate professional licenses and certifications to maintain platform trust and safety.
• Prevent Fraud: Detect and prevent fraudulent activity, abuse, and unauthorized access to the platform.
• Legal Compliance: Meet regulatory, tax, and legal reporting obligations.

We share information only in the following circumstances:

• With Employers (on shift assignment): Worker name, professional role, credential verification status, and reliability score.
• With Workers (on shift assignment): Employer name, shift location, and contact information.
• With Stripe: Payment information necessary to process transactions, escrow, and payouts.
• With Credential Verification Services: Information necessary to verify professional licenses and certifications.

We do not sell personal data to third parties. We do not share your information with advertisers or data brokers.

We implement industry-standard security measures to protect your data:

• TLS Encryption: All data transmitted between your device and our servers is encrypted in transit using TLS (Transport Layer Security).
• Encrypted Storage: Sensitive data is encrypted at rest in our databases.
• Credential Documents: Uploaded credential documents are stored in access-controlled, encrypted cloud storage with strict access policies.
• Payment Data: All payment and financial data is handled exclusively by Stripe, a PCI-DSS Level 1 certified payment processor. ShiftCura never stores card numbers or bank account details.

We retain your personal data for the duration of your active account plus 7 years following account closure. This retention period is necessary to meet legal, tax, and regulatory obligations applicable to healthcare staffing transactions.

Deletion requests are honoured subject to applicable data retention requirements. Where legal obligations require us to retain certain data, we will inform you of the specific data retained and the legal basis.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Delete your personal data (subject to retention requirements)
• Opt out of non-essential communications

To exercise any of these rights, contact us at privacy@shiftcura.com. We will respond to your request within 30 days.

ShiftCura uses essential cookies only for authentication and session management. These cookies are strictly necessary for the platform to function and cannot be disabled.

We do not use advertising cookies, tracking cookies, or any third-party analytics cookies that track your activity across other websites.

For questions or concerns regarding this Privacy Policy or our data practices, please contact us at:

privacy@shiftcura.com