Privacy policy
Last updated: [date]
Draft template. Have your attorney review and complete the bracketed sections before publishing this page.
Who we are
Tendora Health, Inc. ("Tendora", "we") operates tendorahealth.com and the Tendora apps. Contact: hello@tendorahealth.com, [business address].
Information we collect
From agencies: contact name, agency name, work email, phone and staffing needs you share with us.
From nurses: name, email, role, license state and number, home ZIP code, availability, skills and credential documents you choose to upload.
From investors and partners: name, organization, email and any message you send.
Automatically: basic device and usage information such as browser type and pages visited. [List any analytics tools you use.]
How we use it
To match agencies with nurses who fit a case, verify licenses and credentials, contact you about the Chicago pilot, operate and improve the service, and meet legal obligations.
We use a nurse's ZIP code only to estimate travel distance. We do not use ZIP code, race, ethnicity, religion, age, disability or sex to rank nurses.
Patient information
Agencies may share limited patient care information in case briefs. It is disclosed to nurses in stages, logged, and handled under business associate agreements with agencies where HIPAA applies. [Counsel to confirm wording.]
How we share information
Agencies see the profile information a nurse makes discoverable. Contact details are shared only after a nurse responds to a case brief. We use service providers such as hosting, email and form tools under contracts that limit their use of your data: [list providers]. We do not sell personal information.
Your choices
Nurses can pause discoverability, block agencies, and ask us to correct or delete their information at any time by emailing hello@tendorahealth.com. [Add state-specific privacy rights that apply to you.]
Biometric information
We do not collect biometric identifiers such as face scans or fingerprints.
Security and retention
We protect information with encryption, access controls and audit logs, and keep it only as long as needed for the purposes above or as the law requires. [Add retention periods.]
Children
Our services are for adults. We do not knowingly collect information from children, except limited patient care details agencies share as described above.
Changes
We will post updates on this page and change the date above.