Privacy Policy

Effective Date: June 16, 2026

BoomRN, Inc. ("BoomRN," "we," "us," or "our") operates the BoomRN platform (the "Platform"), a software marketplace and administrative interface through which healthcare facilities ("Facilities") and licensed or otherwise qualified healthcare professionals ("Clinicians") may create profiles, exchange information, post or review service opportunities, document Shift Reports, and facilitate billing and payment administration.

This Privacy Policy explains how we collect, use, disclose, retain, and protect information in connection with your use of the Platform. It is incorporated into and must be read together with our Terms of Service ("TOS"). Capitalized terms used but not defined here have the meanings given in the TOS. By creating an account, accessing the Platform, or using any Platform feature, you agree to the collection and use of information as described in this Privacy Policy.

Nothing in this Privacy Policy alters, modifies, or supersedes any provision of the TOS, including the classification-pathway provisions, the independent-contractor acknowledgements, the Shift Report characterization, the limitation-of-liability provisions, or the arbitration agreement.

1. Information We Collect

1.1 Account and Identity Information

When you register for an account or complete onboarding on the Platform, we may collect:

1.2 Professional Credential and License Information

To support credential-status labeling and marketplace compliance features, we collect professional license numbers, license types, certifications, registration details, expiration dates, and related supporting documentation. This information is used solely for Platform eligibility, credential-status display, and fraud-prevention purposes. We do not determine clinical competency, patient assignment suitability, or worksite fitness for any specific Facility.

1.3 Background Screening and Registry Information

We may collect background screening results, registry-check outcomes, and related screening data as part of the onboarding and eligibility process described in the TOS. You authorize us and our vendors to collect, review, disclose, and share this information with Facilities for legitimate onboarding, approval, compliance, and risk-management purposes.

1.4 Payment and Financial Information

In connection with the billing and payment-facilitation services described in the TOS, we collect:

Payment and financial information is processed through third-party payment processors (including Plaid and Stripe). We do not store raw bank account numbers on our servers beyond what is necessary to initiate or complete a transaction. Processing of raw financial data is governed by the applicable processor's terms and privacy practices.

1.5 Shift and Shift Report Data

For each Shift documented through the Platform, we generate and maintain a Shift Report as an administrative record. A Shift Report may include the Job ID, Facility identity, Clinician identity, submitted arrival and departure information, break information if collected, GPS or geolocation verification signals if applicable, approval status, dispute flags, and related pricing data. As stated in the TOS, a Shift Report is an administrative record only and does not create or imply employment, payroll administration, or supervision by BoomRN.

1.6 Location and Device Data

Certain Platform features, including arrival confirmation, GPS clock-in verification, and fraud prevention, may use location data, device data, timestamps, map pins, or related verification signals. As stated in the TOS, such features are verification tools only. They do not direct the Clinician's work, do not evaluate clinical quality, and do not create a right in BoomRN to control the manner or means of the Clinician's professional services. You authorize us to collect geolocation data where applicable to support the features described in this section.

1.7 Communications and Support Data

We collect and retain communications between users and BoomRN support, including support tickets, chat logs, email correspondence, and push notification interaction data. We also collect data about notification preferences, subscription status, and opt-out elections.

1.8 Usage and Technical Data

When you access or use the Platform, we automatically collect:

1.9 Objective Reliability Indicators

The Platform may generate or maintain objective reliability indicators based on Shift Report data, cancellation history, late-arrival records, no-show events, dispute history, and response patterns. As stated in the TOS, these indicators are administrative marketplace features only and shall not be interpreted as supervision, discipline, direction, or control over professional services.

2. How We Use Information

We use the information we collect for the following purposes:

2.1 Platform Operation and Service Delivery

To provide, operate, maintain, administer, and improve the Platform, including processing Shift postings, managing applications, generating Shift Reports, supporting billing and payment facilitation, and enabling all marketplace and administrative features described in the TOS.

2.2 Identity Verification and Eligibility

To verify user identity, confirm credential status, administer background and registry checks, and determine eligibility to access the Platform or specific Platform features, including the Independent-Business Pathway.

2.3 Payment Processing and Administration

To process invoices, facilitate Clinician payouts, issue or receive ACH transfers, administer Stripe Connect accounts, generate tax forms, and maintain financial records, acting as a limited payment collection and disbursement agent as described in the TOS.

2.4 Shift Report Finalization and Billing Support

To generate, maintain, administer, and finalize Shift Reports for invoicing, payment processing, dispute administration, and auto-verification purposes consistent with the TOS.

2.5 Fraud Prevention, Security, and Risk Management

To detect, investigate, and prevent fraudulent, abusive, or unauthorized use of the Platform; to administer chargebacks, holds, and reserves; and to support payment-processor compliance and risk-management requirements.

2.6 Communications

To send operational, transactional, scheduling, billing, approval, security, and promotional communications as permitted by the TOS and applicable law, including push notifications, SMS, and email.

2.7 Compliance, Legal, and Regulatory Obligations

To comply with applicable law, respond to lawful requests from government authorities, satisfy tax and reporting obligations, and report to appropriate authorities where required or reasonably appropriate as described in the TOS.

2.8 Audit, Recordkeeping, and Dispute Resolution

To maintain records for audit, legal, security, fraud-prevention, and dispute-resolution purposes as described in the TOS, including records of archived or deleted account data.

2.9 Platform Improvement and Analytics

To analyze usage patterns, conduct internal research, improve Platform features and reliability, and optimize the marketplace experience.

2.10 Rapid Fill and Marketplace Continuity

To support the Rapid Fill feature described in the TOS by using no-show, late-arrival, dispute, and response-history data for objective reliability, fraud-prevention, risk-management, and Platform-access purposes only.

2.11 Artificial Intelligence Features

To generate personalized communications and support certain Platform features, we use third-party artificial intelligence services, including Anthropic's Claude. To provide these features, limited account information (such as your profile completion status and onboarding progress) may be shared with these AI providers. This data is used solely to generate the relevant communication or feature and is not used by the AI provider to train its models. We obtain your consent to this processing as part of your acceptance of the Terms of Service. You may contact us using the information in Section 11 with any questions about how AI is used in connection with your data.

3. How We Share Information

We do not sell your personal information. We may share information in the following circumstances:

3.1 Between Clinicians and Facilities

To operate the marketplace, we make Clinician profile information, credential-status labels, reliability indicators, and related marketplace data available to Facilities for legitimate approval and compliance purposes, as described in the TOS. Facilities are solely responsible for reviewing and relying on this information in their own decision-making.

3.2 Payment Processors and Financial Service Providers

We share financial information with third-party payment processors, including Plaid and Stripe, to facilitate bank account linking, payment collection, ACH transfers, payout disbursement, and related financial services. These processors operate under their own terms and privacy policies.

3.3 Background Screening and Verification Vendors

As authorized by you and described in the TOS, we share identity and credential information with third-party screening vendors to conduct background checks, registry checks, license verification, and related screening processes.

3.4 Artificial Intelligence Providers

As described in Section 2.11, we share limited account information with third-party AI providers, including Anthropic, solely to generate personalized communications and support certain Platform features. This information is not used by these providers to train their models.

3.5 Service Providers and Platform Vendors

We engage third-party vendors to support Platform operations, including cloud hosting, data storage, push notification delivery, SMS services, email delivery, customer support tooling, analytics, and security monitoring. These vendors access information only as necessary to perform services on our behalf and are bound by confidentiality obligations.

3.6 Legal and Compliance Disclosures

We may disclose information to governmental authorities, regulatory bodies, licensing boards, or other third parties where required by law, court order, or lawful process, or where BoomRN reasonably determines that reporting is appropriate for safety, abuse, credential, or compliance concerns, as described in the TOS.

3.7 Business Transfers

In connection with a merger, acquisition, reorganization, financing, sale of assets, or similar transaction, information we hold may be transferred to a successor entity as permitted under the TOS and applicable law.

3.8 With Your Consent

We may share information for other purposes with your prior consent or at your direction.

4. Data Retention and Archiving

We retain information for as long as necessary to provide the Platform, fulfill the purposes described in this Privacy Policy, satisfy applicable legal and regulatory obligations, support audit and recordkeeping requirements, and enforce our rights under the TOS.

When a Facility or Clinician account is deleted, we permanently remove your profile information and associated records from our active systems. Certain information may be retained as required by law or for legitimate business purposes, including records of completed transactions, tax documentation (such as 1099 forms), Shift Reports, and information necessary to comply with legal, regulatory, financial, audit, dispute-resolution, or fraud-prevention obligations consistent with the TOS. Such retained data is handled in accordance with applicable law and deleted when no longer required.

Payment records, tax documentation, and invoicing data are retained for the periods required by applicable tax and financial laws.

5. Cookies and Tracking Technologies

We and our service providers may use cookies, web beacons, local storage, and similar technologies to operate and improve the Platform, maintain session state, support security features, and analyze usage. You may control cookie preferences through your browser settings; however, disabling certain cookies may impair Platform functionality. We do not currently respond to browser Do Not Track signals because no uniform standard exists.

6. Security

BoomRN utilizes commercially reasonable physical, organizational, and technical safeguards to protect information on the Platform from unauthorized or unwanted use or disclosure, consistent with the TOS. These measures include encryption of data in transit and at rest, access controls, authentication requirements, and periodic security reviews.

No method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security. In the event of a security incident affecting your information, we will notify you as required by applicable law.

7. Your Rights and Choices

7.1 Access, Correction, and Portability

You may access, update, or correct certain account information directly through the Platform. To request access to, a copy of, or correction of personal information we hold about you, please contact us using the information in Section 11.

7.2 Account and Data Deletion

You may delete your account and associated personal data at any time directly within the BoomRN app by navigating to Settings and selecting "Delete Account." When you delete your account, your profile information and associated records are permanently removed from our active systems. Please be aware that we are required to retain certain information for legal compliance, audit, dispute resolution, fraud prevention, tax, and recordkeeping purposes as described in Section 4 and the TOS. Such retained data is handled in accordance with applicable law and deleted when no longer required. If you need assistance with account deletion, contact us using the information in Section 11.

7.3 Communications Preferences

You may opt out of promotional communications using the unsubscribe or preference-management tools made available through the Platform or by contacting us. As stated in the TOS, opting out of certain operational communications may impair your use of the Platform or related services.

7.4 California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), including the right to know, the right to delete, the right to correct, the right to opt out of the sale or sharing of personal information (we do not sell personal information), and the right to non-discrimination for exercising your rights. To submit a verifiable consumer request, please contact us using the information in Section 11. Disputes relating to privacy rights are subject to the arbitration agreement in the TOS.

7.5 Location Data

You may disable location services for the Platform through your device settings. Disabling location data may prevent certain Platform features from functioning correctly, including GPS-based arrival confirmation and clock-in verification. If verification data is unavailable as a result, BoomRN may require alternate verification or manual review before a Shift Report is finalized, consistent with the TOS.

8. Third-Party Services and Integrations

The Platform integrates with or links to third-party services, including payment processors (Plaid, Stripe), background screening vendors, artificial intelligence providers (Anthropic), push notification services, SMS providers, geolocation services, and analytics tools. BoomRN is not responsible for the privacy practices, data handling, outages, errors, delays, or policies of such third parties, consistent with the TOS. We encourage you to review the privacy policies of any third-party service you interact with through the Platform.

9. Children

The Platform is not directed to individuals under the age of 18. Consistent with the TOS, you must be at least 18 years of age to use the Platform. We do not knowingly collect personal information from individuals under 18. If we become aware that a user is under 18, we will take steps to deactivate that account and remove associated information.

10. Changes to This Privacy Policy

BoomRN may update this Privacy Policy from time to time by posting a revised version through the Platform. We will indicate the effective date of the updated version at the top of this document. Consistent with the TOS, your continued access to or use of the Platform after the posting of an updated Privacy Policy constitutes your acceptance of the revised terms, except to the extent applicable law requires a different process. If we make material changes that affect your rights, we will provide additional notice as required by law.

11. Contact Information

If you have questions, requests, or concerns about this Privacy Policy or our data practices, please contact us at:

BoomRN, Inc. Attn: Privacy Officer
Email: privacy@boomrn.com
Jurisdiction: Orange County, California

Disputes relating to this Privacy Policy or our data practices are subject to the arbitration agreement and governing law provisions set forth in the TOS.

Acknowledgement

By using the Platform, creating an account, posting or accepting a Shift, or otherwise accessing Platform features, you acknowledge that you have read, understood, and agreed to be bound by this Privacy Policy and the Terms of Service.