How LaborRx handles personal information in the web application, the staff app and the agency API, and what facilities and their staff can expect.
What this policy covers
This Privacy Policy explains how LaborRx Corporation (LaborRx, we, us) handles personal information in the LaborRx web application, the LaborRx staff app for iOS and Android, the agency API and our website at laborrx.ai (together, the Service).
Most of the personal information in the Service is entered by a skilled nursing facility or another healthcare operator (the Customer) about its own staff. For that information the Customer decides why and how it is used, and we process it on the Customer's instructions under our contract with them. If you are a nurse or aide using the staff app, your facility is your first point of contact for questions about your data; we help them answer.
The information we collect
Information your facility enters
Your name, position, contact details, employment type, units and facilities you work in, availability, scheduled and worked shifts, hours and overtime, time off requests, call offs and no shows, shift pickups, pay rates and bonuses where the facility tracks them, and notes the facility keeps about scheduling.
Information you give us in the Service
Your account details, the requests you make in the staff app, messages you send in the facility chat, feedback you send through the help button, and anything you type into a form.
Information collected automatically
Device type and operating system, app version, a push notification token, log data such as the time of a request and the pages or screens used, crash reports, and usage events that tell us which features are used. We use cookies and similar technologies on the website and in the web application to keep you signed in and to understand usage.
Information from agencies
When a facility sends an open shift to a staffing agency, the agency may return the name and position of the person it assigns, so the facility can put them on the schedule.
How we use information
- to provide the Service: build and publish schedules, fill open shifts, route call offs, run approvals and show staffing and labor metrics to the facility;
- to send notifications you or your facility asked for, such as an open shift, an approval or a message;
- to support you and your facility, including answering requests sent through the help button;
- to keep the Service secure, detect abuse and debug problems;
- to understand how the Service is used and improve it;
- to meet legal obligations and enforce our agreements.
We do not sell personal information and we do not use it for advertising. We do not use personal information from the Service to train models that are shared with other customers; aggregated figures that cannot identify a person or a facility may be used to build benchmarks.
Health information and HIPAA
The Service is for staffing and labor data and does not need patient records. Where a Customer's use of the Service involves protected health information under HIPAA, we act as the Customer's business associate under a signed business associate agreement, and that agreement governs how we handle that information.
Operational metrics such as census counts, hours per patient day and the facility health score describe the facility, not individual patients.
How long we keep information
We keep personal information for as long as the Customer's subscription is active and as its instructions and our contract require. When a subscription ends, the Customer can export its data for 30 days; we then delete it from live systems within 60 days and from backups within the backup cycle, unless a law requires us to keep it longer.
Log and crash data is kept for up to 12 months. Support conversations are kept for as long as needed to resolve the request and for a reasonable period after.
How we protect information
We protect the Service with measures that include encryption in transit and at rest, role based access, audit logging, separate environments for development and production, regular backups and security reviews of our code and vendors. Access to Customer Data inside LaborRx is limited to the people who need it to run and support the Service.
No system is completely secure. If we learn of a breach that affects your information, we will notify the affected Customer without undue delay, as our contract and the law require.
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete or receive a copy of your personal information, or to object to or restrict some uses of it. For information your facility entered, send your request to your facility; we will help them respond. For information we hold as a controller, such as website analytics or support conversations, email us at support@laborrx.ai.
- Notifications: you can turn push notifications off in your device settings. Your facility can still reach you through the app's chat and by its usual channels.
- Cookies: you can block cookies in your browser; the web application needs a session cookie to keep you signed in. On this website, Cookie settings in the footer changes your choice.
- Analytics: app analytics and crash reports are collected to keep the Service working; they are not used for advertising.
We will not treat you differently for exercising a privacy right.
Cookies on this website
This section describes cookies and service providers used by the marketing website at laborrx.ai. It is here for review and does not replace the product terms above.
Cookies
- Necessary. A cookie named
cookieyes-consentstores the choice you make in the cookie banner and lasts one year. The same cookie records an opt out when your browser sends Global Privacy Control. A cookie namedlrx_demokeeps a demo booking session after you verify your email. It is http only, lasts 30 minutes, and is set only after that check succeeds. - Analytics. If you allow analytics, PostHog stores a random identifier in local storage so we can count visits to this website. It may also set a cookie for the same purpose. PostHog does not receive anything you type into the demo form. If you refuse analytics, or your browser sends Global Privacy Control and you have not chosen otherwise, we do not load it.
- Marketing. This category stays off unless you allow it. The website does not set marketing cookies today.
Service providers for this website
- Cloudflare provides the Turnstile check on the demo form, which tells people apart from bots. To do that it processes your IP address, a fingerprint of the connection, your browser user agent header and the key that identifies this website, and uses them only to detect and block bots. Cloudflare describes this in its Turnstile privacy policy.
- Microsoft sends the verification email and, when you book, creates the calendar event and the confirmation.
- Upstash holds the verification code hash and the rate limit counters for a short time. It does not receive the message you type.
- PostHog receives website analytics only after you allow that category.
- The company that hosts the website receives ordinary request logs.
You can reopen the cookie choices from Cookie settings in the footer.
Children
The Service is for adults who work for or with our Customers. It is not directed to anyone under 18, and we do not knowingly collect personal information from children.
Where information is stored
LaborRx is based in the United States and stores and processes information in the United States. If you use the Service from outside the US, your information will be transferred to and handled in the US.
Changes to this policy
We may update this policy as the Service changes. We will post the new version here with a new effective date, and tell Customers about material changes by email and in the Service at least 30 days before they take effect.
Contact
Questions about privacy: support@laborrx.ai
LaborRx Corporation3701 W Lunt AveLincolnwood, IL 60712