HiredHealth

Privacy Policy

Version: 1.2     Effective Date: April 30, 2026

Applies to: HiredHealth Mobile App, Web Application, and Website

HiredHealth, Inc. (“HiredHealth,” “we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, web application, and mobile application (collectively, the “Platform”).

HiredHealth is a credential-enabled marketplace, not a credentialing authority. HiredHealth may provide administrative tools that allow Clinicians to submit, store, organize, display, transmit, and share professional profile information and credential-related documents. HiredHealth may also perform limited identity, NPI, license-status, document-completeness, fraud-prevention, or account-integrity checks. These activities are intended to support Platform integrity, matching, and administrative efficiency only. They do not constitute credentialing, privileging, peer review, clinical competency review, employment screening, payer enrollment, endorsement, recommendation, or authorization to provide clinical services. Employers remain solely responsible for independently reviewing Clinician information and completing all credentialing, privileging, onboarding, hiring, supervision, classification, and clinical-authorization decisions.

Please read this Privacy Policy carefully. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the practices described herein. This Privacy Policy applies to all users of the Platform, including Clinicians and Employers.

1. INFORMATION WE COLLECT

1.1 Information You Provide Directly

We collect information you provide when you register, create a profile, or use the Platform.

For Clinicians, we may collect:

• Full name, contact information, professional credentials, specialty, subspecialty, and NPI number

• Medical license numbers, license states, license status information, and related professional-registration information

• DEA registration information, board certification status, training, education, work history, procedure experience, and professional background

• Malpractice insurance information, including carrier, coverage type, policy limits, and coverage dates

• Availability, preferred locations, work preferences, compensation expectations, travel preferences, and Assignment preferences

• Professional documents you choose to upload, such as CVs, licenses, certifications, malpractice documents, immunization records, procedure logs, references, or other credential-related materials

• Government-issued identification or similar information used for identity verification and fraud prevention

• Banking, tax, or payment information used for compensation processing through Stripe or another payment processor

• Communications, messages, notes, confirmations, and other information you submit through the Platform

• Any other information you choose to include in your profile or provide through the Platform

For Employers, we may collect:

• Facility name, address, and type

• Primary contact name, title, email, and phone number

• Billing information for Platform Fee processing via Stripe

• Staffing needs, specialty requirements, and shift details

• Any other information provided when posting clinical coverage opportunities

1.2 Information Collected Automatically

When you access the Platform, we automatically collect certain technical information, including IP address and approximate geographic location, device type, operating system, and browser type, pages viewed, features used, and actions taken on the Platform, date and time of access, session duration, and navigation patterns, referring URLs and exit pages, mobile device identifiers (such as IDFA or Android Advertising ID) where applicable, and crash reports and performance data.

1.3 Information from Third Parties

We may receive information about you from third parties, including identity verification providers; payment processors, including Stripe, for transaction status and payment-related information; analytics, crash-reporting, and performance-monitoring providers; app stores, including the Apple App Store and Google Play; public or third-party professional licensing databases used for limited license-status, NPI, or profile-integrity checks; background screening or compliance vendors, where applicable and where authorized or required by law; and Employers, Clinicians, references, or other users who provide information in connection with an Assignment or Platform interaction.

Information obtained from third parties may be used to support identity verification, account integrity, fraud prevention, profile completeness, matching, Assignment administration, payment processing, legal compliance, and Platform safety. HiredHealth’s receipt or use of such information does not constitute credentialing, privileging, peer review, employment screening, clinical competency review, or authorization to provide clinical services, unless expressly stated in a separate written agreement.

Where HiredHealth or an Employer obtains background screening, exclusion screening, or other reports that are regulated as consumer reports or investigative consumer reports, such reports will be obtained and used only with required authorization and notices and in accordance with applicable law. Unless expressly stated otherwise, HiredHealth does not use background screening reports to make hiring, employment, credentialing, privileging, or clinical-authorization decisions.

1.4 Patient Information and PHI

The Platform is not designed to collect, transmit, process, or store protected health information (“PHI”) as defined under HIPAA or other patient-identifiable information. Users must not upload, enter, transmit, or disclose patient information through the Platform, including in messages, documents, notes, job postings, Assignment Confirmations, attachments, or support requests.

If HiredHealth becomes aware that PHI or patient-identifiable information has been submitted to the Platform, HiredHealth may remove, restrict, delete, quarantine, or otherwise address such information and may take any additional steps required by applicable law.

HiredHealth does not act as a HIPAA business associate unless HiredHealth separately enters into a written Business Associate Agreement with a covered entity or business associate.

2. HOW WE USE YOUR INFORMATION

2.1 Platform Operations

We use the information we collect to operate, maintain, secure, and improve the Platform, including to create, manage, authenticate, and secure your account; create, organize, display, and maintain Clinician professional profiles and Employer facility profiles; support credential-enabled marketplace features including document upload, storage, organization, display, sharing, and profile-completeness tools; match Clinicians with Employer opportunities; facilitate communications, Assignment offers, Assignment acceptance, Assignment Confirmations, and related administrative workflows; process payments, collect Platform Fees, and display payment or transaction records through Stripe; display Clinician profile information to Employers who have activated Verified Hiring Access; and send transactional communications including Assignment confirmations, payment receipts, account notifications, and legal or policy notices.

2.2 Safety, Profile Integrity, and Limited Verification

We use information to promote safety, trust, and profile integrity on the Platform, including to perform limited identity, NPI, license-status, document-completeness, fraud-prevention, and account-integrity checks; confirm that professional profile information is internally consistent or complete enough for Platform use; detect, prevent, and respond to fraud, abuse, unauthorized access, credential misrepresentation, and Platform misuse; enforce our Platform Services Agreement, Terms of Use, and other Platform policies; and respond to reports of misconduct, inaccurate information, safety concerns, or policy violations.

These activities are intended to support Platform integrity and administrative efficiency. They do not constitute credentialing, privileging, peer review, clinical competency review, employment screening, payer enrollment, endorsement, recommendation, or authorization to provide clinical services.

2.3 Communications

We may use your contact information to send service-related notifications and updates, respond to inquiries and support requests, send marketing communications about new features or Platform updates (you may opt out at any time), and provide important legal or policy notices.

2.4 Analytics and Improvement

We use aggregated and de-identified data to analyze usage patterns, develop new features, conduct internal research and benchmarking, and generate market insights about healthcare staffing trends. We do not sell individually identifiable information to third parties for any purpose.

2.5 Legal Compliance

We may use your information as necessary to comply with applicable laws, regulations, and legal processes, respond to lawful requests from government or regulatory authorities, enforce our rights and protect against legal claims, and fulfill our obligations under the Platform Services Agreement.

3. HOW WE SHARE YOUR INFORMATION

3.1 With Other Users

Clinician Profile Visibility. When an Employer activates Verified Hiring Access or otherwise receives authorized access through the Platform, the Employer may view Clinician profile information, which may include specialty, credentials, licensure information, availability, compensation expectations, work history, malpractice coverage information, uploaded professional documents, and other information the Clinician chooses to provide or make available.

Assignment Details. Once an Assignment Confirmation is formed, relevant contact, profile, Assignment, payment, scheduling, and administrative information may be shared between the Employer and Clinician as necessary to complete or administer the Assignment.

Credential-Enabled Marketplace Limitation. Sharing Clinician profile information or credential-related information through the Platform does not mean HiredHealth has credentialed, privileged, approved, endorsed, recommended, or authorized the Clinician. Employers remain solely responsible for independently reviewing such information and completing all credentialing, privileging, onboarding, and clinical-authorization requirements.

3.2 With Service Providers

We share information with trusted third-party vendors who assist us in operating the Platform, including Stripe for payment processing and fee collection, cloud hosting and infrastructure providers, analytics and performance monitoring tools, customer support platforms, identity verification and background screening services, and email and push notification delivery services. All service providers are contractually required to use your information only as directed by HiredHealth and to maintain appropriate security standards. Payment data processed through Stripe is handled under Stripe’s own terms of service and privacy policy.

3.3 Business Transfers

If HiredHealth is involved in a merger, acquisition, asset sale, or similar corporate transaction, your information may be transferred as part of that transaction. We will provide notice through the Platform or by email before your information is transferred and becomes subject to a different privacy policy.

3.4 Legal Requirements

We may disclose your information if required to do so by law or in good faith belief that such disclosure is necessary to comply with a legal obligation or court order, protect the rights, property, or safety of HiredHealth, our users, or the public, detect, prevent, or address fraud, security, or technical issues, or enforce our Platform Services Agreement.

3.5 With Your Consent

We may share your information for purposes not described in this Privacy Policy when we have obtained your explicit consent to do so.

3.6 What We Do Not Do

HiredHealth does not:

• Sell your personally identifiable information to third parties

• Share your personally identifiable information with advertisers for cross-context behavioral advertising or ad targeting

• Disclose Clinician profiles to Employers who have not activated Verified Hiring Access or otherwise received authorized access through the Platform

• Intentionally collect, transmit, store, or process PHI or patient-identifiable information through the Platform

• Credential, privilege, clinically approve, endorse, recommend, employ, supervise, or authorize any Clinician to provide clinical services

• Replace any Employer’s independent credentialing, privileging, onboarding, medical staff, payer-enrollment, or clinical-authorization process

4. COOKIES AND TRACKING TECHNOLOGIES

4.1 Types of Cookies We Use

Strictly Necessary Cookies: Required for core Platform functionality such as login sessions and security. Cannot be disabled without affecting Platform operation.

Functional Cookies: Remember your preferences such as location filters and notification settings. Enable personalized features within the Platform.

Analytics Cookies: Collect anonymized data about how users interact with the Platform. Help us understand usage patterns and improve performance.

4.2 Mobile Identifiers

Our mobile application may collect mobile device identifiers (such as IDFA on iOS or GAID on Android) for analytics and crash reporting purposes. You may reset or limit these identifiers through your device settings.

4.3 Your Choices

You may control cookies through your browser settings. Disabling certain cookies may affect Platform functionality. For mobile applications, you may adjust tracking preferences through your device’s privacy settings.

5. DATA RETENTION

We retain information for as long as your account is active or as needed to provide Platform services, comply with legal obligations, resolve disputes, enforce our agreements, maintain business records, and support Platform integrity. Specifically:

• Active account data, profile information, and credential-enabled marketplace information are retained for the duration of your account

• Professional documents uploaded by Clinicians are retained while the account is active unless deleted by the Clinician or removed in accordance with Platform policies, subject to legal, contractual, fraud-prevention, payment, dispute-resolution, or recordkeeping obligations

• Assignment and transaction records are retained for a minimum of seven (7) years to support business, tax, payment, accounting, dispute-resolution, and legal recordkeeping obligations

• Non-circumvention-related records may be retained for at least twelve (12) months following the last Assignment or Platform interaction, consistent with the Platform Services Agreement

• Deactivated account data may be retained for up to three (3) years following deactivation, after which it is deleted or anonymized unless a longer retention period is required or permitted by law, contract, fraud-prevention needs, dispute resolution, tax obligations, or legitimate business purposes

• Aggregated and de-identified data may be retained indefinitely for analytics, benchmarking, product improvement, and market insight purposes

You may request deletion of your personal information at any time, subject to our legal, contractual, security, fraud-prevention, payment, dispute-resolution, and recordkeeping obligations.

6. DATA SECURITY

We implement administrative, technical, and physical safeguards designed to protect your information from unauthorized access, use, alteration, and disclosure, including encryption of data in transit using TLS/SSL protocols, encryption of sensitive data at rest, access controls limiting employee access on a need-to-know basis, regular security assessments and vulnerability monitoring, and secure payment processing through Stripe’s PCI-DSS compliant infrastructure.

No method of transmission over the internet or electronic storage is completely secure. While we use commercially reasonable measures to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your rights, we will notify you as required by applicable law.

7. YOUR RIGHTS AND CHOICES

7.1 Access and Correction

You may access and update most of your personal information directly through your account settings. If you need assistance correcting inaccurate information, contact us at the address below.

7.2 Deletion

You may request deletion of your account and personal information by contacting us. We will process deletion requests subject to our retention obligations for legal, regulatory, and contractual compliance purposes. Deleting your account does not affect obligations arising from Assignments formed prior to deletion.

7.3 Marketing Opt-Out

You may opt out of marketing communications at any time by clicking “Unsubscribe” in any marketing email or by adjusting your notification preferences in your account settings. You will continue to receive transactional and service-related communications necessary for Platform operation.

7.4 Push Notifications

You may disable push notifications from the HiredHealth mobile application through your device’s notification settings at any time.

7.5 California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect and how it is used, the right to request deletion of your personal information, the right to correct inaccurate personal information, the right to opt out of the sale or sharing of personal information, and the right to limit certain uses of sensitive personal information.

HiredHealth does not sell personal information. HiredHealth does not share personal information with advertisers for cross-context behavioral advertising.

To exercise your California privacy rights, contact us at support@hiredhealth.com with “California Privacy Request” in the subject line. We will respond within 45 days as required by law.

7.6 Other Jurisdictions

If you are located outside the United States and your jurisdiction provides additional privacy rights, please contact us to exercise those rights. HiredHealth is based in the United States and your information will be processed in the United States.

7.7 State Privacy Rights

Depending on your state of residence and applicable law, you may have rights to request access to, correction of, deletion of, or portability of personal information; to opt out of certain uses or disclosures of personal information; to limit certain uses of sensitive personal information; or to appeal a decision regarding your privacy request. HiredHealth will honor applicable privacy rights where required by law.

HiredHealth may collect categories of personal information including identifiers, professional or employment-related information, education information, commercial information, internet or network activity information, geolocation information, communications, payment information, and sensitive personal information such as government identification, account login information, financial account information, and credential-related documents.

HiredHealth uses these categories of information for the purposes described in this Privacy Policy, including account creation, Platform operations, credential-enabled marketplace features, matching, Assignment administration, payment processing, security, fraud prevention, legal compliance, analytics, and product improvement.

HiredHealth does not sell personal information. HiredHealth does not share personal information with advertisers for cross-context behavioral advertising. HiredHealth retains personal information as described in Section 5. To submit a state privacy request, contact us at support@hiredhealth.com.

8. CHILDREN’S PRIVACY

The Platform is intended for use by licensed healthcare professionals and healthcare facility representatives. It is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18 years of age. If we become aware that we have collected information from a minor, we will promptly delete it.

9. THIRD-PARTY LINKS AND SERVICES

The Platform may contain links to third-party websites, services, or resources. HiredHealth is not responsible for the privacy practices or content of those third parties. Our payment processing is handled by Stripe, which handles payment data under its own terms of service and privacy policy, available at stripe.com/privacy.

10. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Effective Date,” notify you through the Platform or by email, and where required by law, obtain your consent before applying material changes. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

11. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

HiredHealth, Inc.

Privacy Inquiries: support@hiredhealth.com

Legal Inquiries: support@hiredhealth.com

Website: www.hiredhealth.com

For data deletion requests, please email privacy@hiredhealth.com with the subject line “Data Deletion Request” and include your full name and the email address associated with your account. We will respond to privacy inquiries within thirty (30) days of receipt.

HiredHealth, Inc. — Confidential

Privacy Policy v1.2 — Effective April 30, 2026