Privacy Policy

1. Overview

ScrubHood (“we”, “us”, “our”) is operated by ScrubHood LLC, a Wyoming limited liability company, at www.scrubhood.com (the “Site”) — a platform designed to help travel nurses research and compare hospitals across the United States.

This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and your choices in relation to it. It applies to all visitors and registered users of the Site, and is written to align with California's Online Privacy Protection Act (CalOPPA) disclosure standards as a baseline practice regardless of where you live. Additional statutory rights for California residents are set out in Section 9.

2. What Information We Collect

a) Account information

When you create an account, we collect your email address and either a password (stored in encrypted form and never readable by us) or, if you sign in with Google, your name and email address as provided by Google.

b) Profile information

You may optionally add a display name and choose an avatar colour. These are used to personalise your experience on the Site.

c) NPI verification

If you choose to verify your nurse credentials, you may provide your National Provider Identifier (NPI). We use this to confirm your registration status against a publicly available federal database and display a Verified Nurse badge on your reviews. Providing your NPI is entirely optional.

d) Reviews and community content

When you submit a hospital review, you provide ratings, written comments, and professional details such as your specialty, agency, and contract year. This content is displayed publicly on hospital profile pages, visible to all Site visitors, under your chosen display name.

You may also submit community information such as scrub colour codes, EMR systems, and parking details for specific hospitals. This content is also publicly displayed.

e) Saved hospitals

If you save hospitals to your dashboard, we store those preferences against your account.

f) Technical and usage data

When you visit the Site, we automatically collect certain technical information including your IP address, browser type, device type, pages visited, and how you interact with the Site. This data is collected via cookies and our analytics provider.

3. How We Use Your Information

We do not use your information to make automated decisions that have legal or significant effects on you.

4. Third-Party Services

To operate the Site, we share certain data with the following named service providers:

• Supabase Auth — manages secure sign-in, including email/password and Google OAuth. If you use Google Sign-In, Google's privacy policy applies to that authentication step.
• Supabase — our database and backend infrastructure provider, storing your account, profile, review, and saved hospital data on servers in the United States (us-east-1 region).
• Vercel — our hosting provider, serving the Site and its underlying application code.
• Google Maps Platform — provides map display and geocoding features used on hospital search and profile pages.
• PostHog — our analytics provider, receiving technical and usage data to help us understand how the Site is used, in aggregated, non-identifying form.
• Resend — our transactional email provider, receiving your email address to send account-related emails such as sign-up confirmations and password resets. We do not use this provider for marketing without your consent.
• Stripe — our payment processor, handling subscription payments and applicable sales tax (Stripe Tax). We do not store your card details; Stripe's privacy policy governs how payment data is handled.

We do not sell your personal information to third parties.

5. Cookies

We use the following types of cookies:

• Strictly necessary — required for the Site to function, including maintaining your logged-in session. These cannot be disabled.
• Analytics — used to understand how visitors use the Site. You can decline these without affecting core functionality.

On your first visit you will be given the option to accept or decline non-essential cookies.

Do Not Track:some browsers offer a “Do Not Track” signal. Because there is no common industry standard for responding to it, we do not currently respond to DNT signals. California residents can use the Global Privacy Control (GPC) instead, as described in Section 9.

6. Data Storage and Security

Your data is stored on servers located in the United States. We take reasonable steps to ensure any third parties who process your data maintain appropriate security standards.

We protect your information through encryption in transit (SSL/TLS), encrypted credential storage, and access controls that limit which data each part of the system can read or write. However, no internet transmission is completely secure and we cannot guarantee absolute security.

7. How Long We Keep Your Data

Note on reviews: Reviews you submit contribute to the information available to other nurses. If you delete your account, your reviews remain published but are disassociated from your account — your display name is removed and the review is shown anonymously. If you wish to have a specific review removed entirely, contact us at privacy@scrubhood.com and we will consider your request.

8. Your Choices & Rights

Regardless of where you live, you can:

• Request a copy of the personal information tied to your account
• Request correction of inaccurate profile information — most of this you can update yourself from your dashboard
• Request deletion of your account and associated personal data

To exercise any of these, contact us at privacy@scrubhood.com. We will respond within 30 days.

If you believe we have not honored this policy, you can also contact the Federal Trade Commission (ftc.gov) or your state Attorney General's office.

9. Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights:

• Right to Know — request details of the personal information we have collected about you in the past 12 months, including sources, purposes, and third parties we share it with.
• Right to Delete — request deletion of personal information we hold, subject to certain exceptions (including our review retention policy above).
• Right to Correct — request correction of inaccurate personal information.
• Right to Opt Out — we do not sell your personal information. Our use of analytics tools may constitute “sharing” for cross-context behavioural advertising under CPRA — you can opt out via cookie settings or the Global Privacy Control (GPC) signal in your browser.
• Right to Non-Discrimination — we will not treat you differently for exercising any of these rights.

To submit a CCPA/CPRA request, contact us at privacy@scrubhood.com. We will respond within 45 days.

Note:these statutory rights apply once ScrubHood meets CCPA/CPRA's applicability thresholds (over $26.625M in annual gross revenue, or personal information of 100,000+ California consumers/households, or 50%+ of revenue from selling/sharing personal information). We extend this section as a matter of good practice ahead of meeting those thresholds.

10. Age Requirements

The Site is intended for registered healthcare professionals aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, please contact us at privacy@scrubhood.com and we will delete it promptly.

11. Accuracy of Information

You are responsible for ensuring that information you provide to us — including your display name, specialty, agency, and NPI — is accurate and up to date. You can update your profile at any time from your dashboard.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised version number and date. For material changes, we will take reasonable steps to notify registered users by email. Your continued use of the Site after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

For any privacy-related questions, requests, or complaints: