VitalPost

Privacy Policy

What we collect, why, and the control you have over it.

Last updated July 4, 2026

Plain-language summary: We collect only what we need to run the marketplace. Clinician profiles are anonymized until you choose to reply to an employer. We never sell your personal information. You can access, correct, or delete your data by contacting us.

1. Scope

This Privacy Policy explains how VitalPost ("we," "us") collects, uses, discloses, and protects information when you use vitalpost.io (the "Platform"). It applies to clinicians, employers, and visitors.

2. Information we collect

Information you provide:

  • Account details — name, email, password (stored only as a salted hash), role, and for clinicians optional professional identifiers such as NPI, credentials, and specialty.
  • Clinician profiles — experience, licensure states, preferences, availability, a summary, and an optional CV.
  • Employer profiles and listings — organization details, recruiter name, and the content of job postings (which must include compensation and a contact email).
  • Communications — messages you send through the Platform, and bug reports or contact messages you submit.

Information collected automatically:

  • Basic usage and device information (such as pages viewed, approximate location derived from IP, and browser type) used to operate, secure, and improve the Platform.

We do not intend to collect protected health information (PHI) about patients. Please do not submit patient information through the Platform.

3. How we use information

We use information to:

  • operate the marketplace — display listings, match clinicians and roles, and enable messaging;
  • verify certain professional identifiers (for example, NPI lookups);
  • send job alerts and service communications you have requested;
  • maintain safety and security, prevent fraud and abuse, and enforce our Terms;
  • improve the Platform and understand how it is used.

4. The anonymity model

Clinician availability profiles are anonymized by default. Your name, contact details, and CV are not revealed to employers unless and until you choose to reply to an employer's outreach. This consent-first design is central to how VitalPost works.

5. How we share information

We share information only as needed to run the Platform:

  • Between users as the marketplace requires (e.g., an employer sees your anonymized profile; your identity is shared when you reply).
  • With service providers who host our infrastructure, database, object storage, email, and (when enabled) SMS, under obligations to protect the data.
  • For legal reasons — to comply with law, respond to lawful requests, or protect rights, safety, and the integrity of the Platform.
  • In a business transfer — as part of a merger, acquisition, or sale of assets, with notice.

We do not sell your personal information.

6. Cookies

We use strictly necessary cookies to keep you signed in and to operate core features. We keep tracking to a minimum. You can control cookies through your browser, though disabling them may affect functionality.

7. Data retention

We retain information for as long as your account is active or as needed to provide the Platform, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion as described below.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise any of these, contact us through our contact page. Clinicians can also pause or edit their profile at any time, and unsubscribe from job-alert emails using the link in those messages.

9. Security

We use reasonable administrative, technical, and physical safeguards — including encrypted connections, hashed passwords, private storage for CVs, and access controls. No system is perfectly secure, but we work to protect your information and to respond promptly to incidents.

10. Children

The Platform is intended for professionals and is not directed to anyone under 18. We do not knowingly collect information from children.

11. Changes to this policy

We may update this Policy from time to time. We will revise the "last updated" date above and, for material changes, provide reasonable notice.

12. Contact

To ask a question or exercise a privacy right, reach us through our contact page.

This document is provided as a starting framework and does not constitute legal advice. VitalPost should have this policy reviewed and finalized by qualified counsel, and aligned with applicable laws (such as state privacy laws), before relying on it.