Privacy Policy

1. Information We Collect

1.1 Information you provide directly

• Identity information — first and last name, date of birth, Social Security Number (for I-9, payroll, and background checks), driver's-license or government ID number, photo.
• Contact information — email address, mobile phone number, home address, emergency contact.
• Professional information — work history, education, professional licenses and certifications (RN, CNA, RBT, CPR/BLS, etc.), résumé/CV, references, specialty preferences, availability.
• Compliance information — background-check results, drug-screen results, fingerprint and clearance results, immunization and TB-test records, work-authorization (Form I-9) and tax forms (W-4, W-9, state equivalents).
• Financial information — bank account/routing number for direct deposit, pay rates, timesheet data.
• Account information — username, password (stored in hashed form), security questions.
• Communications — messages you send to us or through the Services, including support inquiries.

1.2 Information collected automatically

• Device and usage data — IP address, device identifier, operating system, browser type, app version, log files, timestamps, screens viewed.
• Location data — when you clock in/out or use shift-related features, we may collect approximate or precise geolocation (with your device-level permission) to verify on-site attendance.
• Cookies and similar technologies — we use cookies and similar tools to keep you signed in, remember preferences, and analyze usage. See Section 7.

1.3 Information from third parties

• Clients — facilities you are assigned to may share assignment-related information, performance feedback, and incident reports.
• Background-check and credentialing vendors — criminal-history records, MVR, sex-offender registry, sanctions/exclusion lists, license-verification services such as Nursys.
• Payroll and time-tracking providers — timesheet and pay-related information.
• Public sources — professional licensing boards, state and federal exclusion databases.

2. How We Use Information

We use personal information to:

• Create and manage your account and verify your identity;
• Match you with shifts, assignments, and Clients across our allied-health, home-care, and educational business lines;
• Conduct background checks, credentialing, and compliance verification;
• Process payroll, tax reporting, and benefits;
• Communicate with you about shifts, assignments, and account matters;
• Provide technical support and respond to inquiries;
• Operate, maintain, secure, and improve the Services;
• Detect, investigate, and prevent fraud, abuse, and security incidents;
• Comply with legal, regulatory, and contractual obligations (including HIPAA, FERPA, state licensing requirements, and Client agreements);
• Defend or enforce our legal rights.

3. Legal Bases

Where applicable law requires a legal basis for processing, we rely on:

• Performance of a contract — to provide the Services you request.
• Consent — for optional communications and certain sensitive information.
• Legitimate interests — to operate, secure, and improve our business.
• Legal obligation — to comply with tax, labor, healthcare, and education laws.

4. How We Share Information

Information you provide is accessible to whichever of the three EagleWings Companies is involved in managing your application or assignment. We also share personal information with:

• Clients — hospitals, clinics, home-care recipients, school districts, and other facilities to which you apply or are assigned. Shared information may include your name, contact details, credentials, background-check status, and time/attendance records.
• Service providers and processors — cloud hosting and infrastructure providers, database and backend services, SMS and voice communications providers, payroll providers, time-tracking providers, background-check and credentialing vendors, license-verification services, and software development and maintenance partners.
• Government and regulators — when required by law (e.g., IRS, state unemployment agencies, state licensing boards, child-protection clearances).
• Legal compliance and protection — to comply with subpoenas, court orders, or other legal process; to enforce our Terms; and to protect the rights, property, and safety of EagleWings, our users, Clients, patients, students, care recipients, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to confidentiality protections.

5. HIPAA and FERPA

When you are placed in clinical or home-care settings, the Client (not EagleWings) is typically the HIPAA-covered entity, and you act on its behalf with respect to Protected Health Information ("PHI"). When you are placed in educational settings, the school district is the entity responsible for FERPA-protected student records. EagleWings does not collect PHI or student educational records as part of the Services; if any such information is inadvertently uploaded, you must promptly notify us at support@eaglewingsalliedstaffing.com so we can take appropriate action.

6. Data Retention

We retain personal information for as long as your account is active and afterward as required to:

• Meet tax, payroll, and employment-records retention requirements (typically 4–7 years after your last assignment);
• Comply with background-check, healthcare, and education laws;
• Resolve disputes and enforce agreements.

You may request deletion of information that is not subject to retention obligations (see Section 9).

7. Cookies and Tracking

We use cookies and similar technologies for authentication, session management, security, and analytics. You can manage cookies through your browser settings; disabling certain cookies may impair functionality. We do not use cookies for third-party behavioral advertising.

8. Security

We use industry-standard administrative, technical, and physical safeguards, including encryption in transit (TLS) and at rest where feasible, role-based access controls, and access logging. No system is perfectly secure; you are responsible for protecting your password and for promptly notifying us of any suspected compromise.

9. Your Rights and Choices

Depending on where you live, you may have rights to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete personal information (subject to retention obligations above);
• Restrict or object to certain processing;
• Portability — receive your information in a portable format;
• Withdraw consent to optional processing;
• Opt out of SMS marketing by replying STOP (transactional messages required for service delivery are excepted);
• Non-discrimination — we will not deny services or change pricing because you exercise these rights.

To exercise any of these rights, email support@eaglewingsalliedstaffing.com. We will respond within the time required by applicable law (generally 30–45 days). We may need to verify your identity before fulfilling a request.

10. International Users and Data Transfers

The Services are intended for users located in the United States. Some of our service providers, including our software-development partner, may access data from outside the United States. Where required, we use contractual safeguards consistent with applicable law to protect cross-border transfers.

11. Children's Privacy

The Services are not directed to children under 18 and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact support@eaglewingsalliedstaffing.com so we can promptly delete it.

12. Third-Party Links

The Services may contain links to third-party sites or services. We are not responsible for the privacy practices of those third parties. Review their privacy policies before providing them with personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Services or by email. The "Last Updated" date at the top reflects the most recent revision.

14. Contact Us

Questions, requests, or complaints about this Privacy Policy or our privacy practices can be sent to any of the three Companies at the addresses below: