This Privacy Policy describes how NurseLinkHub ("we," "us," or "our") collects, uses, and shares personal information when you use our website and services (the "Service").
1. Information We Collect
- Account data: name, email, password (hashed), nurse type (RN/LPN/NP/etc.), U.S. state, license number, NPI, specialties, bio, years of experience, and any profile photo you upload.
- Identity verification data: photo ID images you submit (Phase A manual review) and the results of NPI Registry checks.
- Content: posts, comments, forum threads, replies, direct messages, nominations, CEU submissions, and reactions.
- Payment data: handled by Stripe. We store only a Stripe customer ID and subscription status — we never see your card details.
- Usage data: pages viewed, actions taken, device/browser type, IP address, and timestamps (for security, rate-limiting, and product analytics).
- Cookies: a single httpOnly session cookie for authentication. We do not use third-party ad-tracking cookies.
2. How We Use Your Information
- Operate the Service (account creation, credential verification, subscription management, messaging, notifications).
- Send the weekly digest email (opt-out anytime via the unsubscribe link in every email).
- Protect the Service against fraud, abuse, and unauthorized access.
- Improve features, fix bugs, and understand aggregate usage patterns.
- Comply with legal obligations.
3. How We Share Information
- Other users: your name, nurse type, state, verified status, bio, and public posts are visible to logged-in members. Guests see only limited fields (name, nurse type, state, verified badge) on the public directory.
- Service providers we rely on to operate the Service: Stripe (billing), Resend (transactional email), MongoDB Atlas (database hosting), and infrastructure providers. Each is contractually bound to protect your data.
- Public sources: we query the NPI Registry (public API) with the NPI number you provide.
- Legal: we may disclose information if required by law, subpoena, or to protect the rights, safety, or property of NurseLinkHub, our users, or the public.
- We do not sell your personal information.
4. Your Choices & Rights
- Access, correct, or update your profile at any time from your Profile page.
- Opt out of digest emails via the unsubscribe link or your Profile settings.
- Cancel your subscription anytime via the Stripe Customer Portal.
- Request deletion of your account and personal data by emailing privacy@nurselinkhub.com. Some data may be retained where required by law (e.g., tax records) or for legitimate fraud-prevention purposes.
- Residents of California, Colorado, Virginia, and other U.S. states with comprehensive privacy laws have additional rights (access, deletion, correction, opt-out of certain processing). To exercise these, email privacy@nurselinkhub.com.
5. Security
We use industry-standard safeguards: httpOnly JWT session cookies, bcrypt password hashing, HTTPS/TLS in transit, encrypted database at rest, brute-force login protection, and access controls for administrators. No system is 100% secure — please use a strong, unique password.
6. Retention
We retain account data as long as your account is active and for a reasonable period after deletion (typically ≤ 90 days) to satisfy legal, accounting, or fraud-prevention needs. Anonymized, aggregate analytics may be retained indefinitely.
7. Children
NurseLinkHub is not directed to individuals under 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact privacy@nurselinkhub.com.
8. Protected Health Information (PHI)
NurseLinkHub is not a HIPAA-covered entity. Do not post PHI or any patient-identifying information to the Service. We may remove such content and suspend accounts that repeatedly do so.
9. International Users
The Service is operated in the United States. If you access it from outside the U.S., your information is transferred to and processed in the U.S.
10. Changes
We may update this Privacy Policy periodically. Material changes will be announced on the Service or via email. The "Effective" date at the top will reflect the latest revision.
11. Contact
Privacy questions or requests: privacy@nurselinkhub.com.