Legal
Privacy Policy
This Privacy Policy explains what information FindRxStaff collects, how we use it, what other users can see, and the choices you have. We collect only the information reasonably necessary to run a staffing coordination platform. We may update this policy from time to time and will post the updated version here.
Privacy Policy version 1.0
1. Information we collect
Account information: name, email address, phone number and account type.
Professional information: worker role(s), license information, certification or registration information, years of experience, skills, pharmacy software experience and languages.
Location information: home ZIP code, preferred ZIP codes, travel radius and, for pharmacies, the pharmacy address. We do not request precise GPS location.
Availability information: available dates, available times and shift preferences.
Platform activity: shifts viewed and posted, expressions of interest, staffing requests, confirmations, notifications and general account activity.
2. Information we ask you not to submit
FindRxStaff is not intended for patient information or other protected health information. Please do not submit:
- Patient names or any patient identifiers
- Patient medical information or Protected Health Information (PHI)
- Prescriptions or prescription images
- Medical records
- Insurance information
- Social Security numbers
- Passwords or authentication codes
- Banking, credit card or other financial account information
- Controlled-substance information
- Confidential or proprietary pharmacy business information
- Any other sensitive information that is not necessary for staffing coordination
No patient information is required anywhere in the application. If prohibited information is submitted, we may remove it and may suspend the account that submitted it.
3. How we use information
- Create and maintain user profiles
- Match workers with shifts and display relevant opportunities
- Display relevant worker information to pharmacies
- Facilitate connections between pharmacies and workers
- Send in-app notifications and shift reminders
- Maintain calendars and shift records
- Improve platform functionality
- Prevent fraud and abuse and maintain security
- Provide customer support
- Comply with legal obligations
4. What other users can see
Depending on the stage of a connection, a pharmacy may see the following about a worker:
- Display name (and full name once a shift is confirmed)
- Worker role(s)
- General location or approximate distance
- Availability
- Professional experience, skills and software
- Credential and verification status
- Relevant preferences such as minimum rate
A worker may see the following about a pharmacy:
- Pharmacy name and general location
- Shift information and requirements
- Pharmacy software and work environment
- Other information relevant to the opportunity
5. Contact information privacy
We do not publicly display a worker's personal phone number or email address, or a pharmacy contact's personal phone number or email address. Direct contact details are revealed only through the platform's connection and confirmation workflow — in practice, once a shift is confirmed for both sides. License numbers and other sensitive identifiers are not shown to other users.
6. Data security
We use reasonable technical and organizational measures, including:
- Encrypted transport (HTTPS) for traffic to the platform
- Securely hashed passwords — passwords are never stored in plain text
- Protected authentication tokens stored in HTTP-only cookies
- Role-based access controls that restrict access to private user data
- Server-side input validation and protected API endpoints
- Separately protected administrative functionality with an audit trail of key admin actions
- Avoiding exposure of sensitive database fields to the frontend
No platform can promise perfect security, so we do not describe FindRxStaff as "100% private", "completely secure" or "HIPAA compliant". We describe only the measures we actually take.
7. Data retention
We may retain information for as long as reasonably necessary to provide the service, maintain records, resolve disputes, prevent abuse and comply with legal obligations. You can request account deletion at any time from your settings.
8. Account deletion
Deleting your account removes or anonymizes your profile, availability, preferences and active expressions of interest where reasonably possible. Certain historical records — such as past shift records, ratings, consent records and security logs — may need to be retained for legitimate business, legal, security or compliance reasons, so we do not promise immediate permanent deletion of every piece of data.
9. Your choices
- Update or correct your profile, availability and preferences at any time
- Block another user to stop unwanted matching and contact
- Report a user or shift for review
- Request account deletion from Settings
- Review the consent records associated with your account
10. Changes and contact
We may update this Privacy Policy from time to time; the version number and Last Updated date above will change accordingly. Questions can be directed to contact@findrxstaff.com. Legal entity: FindRxStaff.
Notice regarding this document
This document is provided to describe the platform's current product structure and should be reviewed and adapted by qualified legal counsel before public launch. It is not legal advice.