Privacy Policy

• Account and identity. Your name, email address, account credentials, and role (clinic or candidate). For clinics, your practice name and related details. We verify clinician identity using the National Provider Identifier (NPI) registry and the license information you provide.
• Professional profile (candidates). Work history, specialties, state licenses and certifications, résumé or CV files, and optional video introductions you upload.
• Practice and role data (clinics). Job postings, role requirements, and hiring activity.
• Messages. The content of messages exchanged between clinics and candidates through the Service.
• Payment information. When you purchase a subscription or are invoiced for a placement, our payment processor collects and processes your payment details. We do not store full payment-card numbers on our servers.
• Usage and device data. Pages viewed, actions taken, IP address, browser type, and similar information collected through cookies and comparable technologies.
• Information from connected accounts. If you sign in with or connect a third-party account such as Google, we receive the basic profile information that provider shares with your permission.

We use the information above to:

• operate the matching engine and produce license-matched candidate shortlists;
• verify NPI and license details;
• enable messaging between clinics and candidates;
• process subscription payments and placement invoices, and administer the placement fee;
• provide support and send service, security, and transactional notifications;
• analyze usage to maintain, secure, and improve the Service and prevent fraud and abuse; and
• comply with our legal obligations.

If you connect a Google account or authorize us to access Google services on your behalf, we use the data we receive solely to provide and improve the specific features you request.

Provider Pair’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not sell it or transfer it to third parties except as needed to provide or improve the Service, to comply with applicable law, or as part of a merger or acquisition.

• Between users. A candidate’s profile is shared with clinics they engage with through the Service, and a clinic’s role details are shared with relevant candidates, as needed to facilitate hiring.
• Service providers (sub-processors). We share information with vendors that host and operate the Service under contract, including authentication (Clerk), database hosting (MongoDB Atlas), hosting and file storage (Vercel), real-time messaging (Pusher), payment processing (Stripe), webhook delivery (Svix), and analytics (Google Analytics). These providers may process your information only on our instructions.
• Legal and safety. To comply with law or valid legal process, to enforce our agreements, or to protect the rights, property, and safety of our users and the public.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets.

We do not sell your personal information.

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. We use Google Analytics to measure aggregate traffic and usage. You can control cookies through your browser settings; disabling some cookies may affect how the Service works.

We retain personal information for as long as your account is active and as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data, subject to information we are required or permitted to retain by law.

We use administrative, technical, and physical safeguards designed to protect your information, including encryption of data in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

You may access, correct, update, or delete your information from your account settings or by contacting us. You may opt out of non-essential marketing messages at any time. Depending on where you live — for example, under the California Consumer Privacy Act or the EU/UK General Data Protection Regulation — you may have additional rights, such as the right to access, port, or delete your data and to object to certain processing. To exercise any of these rights, email privacy@providerpair.com.

Provider Pair is a hiring marketplace. The clinician information on the Service is professional and employment information — licenses, certifications, and work history — not patient medical records. We are not a HIPAA covered entity acting on protected health information through the Service, and you must not submit patient PHI through the platform.

The Service is intended for professional use by adults. It is not directed to children under 18, and we do not knowingly collect personal information from anyone under 18.

The Service is operated in the United States. If you access it from outside the United States, you understand that your information will be processed in the United States, where data-protection laws may differ from those in your jurisdiction.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide a more prominent notice.

Questions about this Privacy Policy or your information? Email privacy@providerpair.com. See also our Terms of Service and Placement Agreement.