Privacy Policy
This policy explains what personal information [Company legal name] ("we") collects through Med Pro Housing, how we use it, and the choices you have.
Information we collect
- Account details: your name, email address, account type, and a securely hashed password. If you sign in with Google or Apple, we receive your name, email address, and an account identifier from them. If you turn on two-step sign-in, we store the key for your authenticator app and hashed recovery codes.
- Profile (optional): a profile photo, a short bio, languages, and for Renters, assignment details such as the facility, dates, who you travel with, and pets.
- Phone number (optional): your mobile number, whether you confirmed it, and whether you want text alerts.
- Identity check (optional): if you choose to verify your identity, Stripe collects images of your government ID and a selfie and uses facial recognition technology to compare them, on our behalf. We do not receive or store the images or any biometric data. We receive only whether the check passed and, if it did not, a short reason. Stripe keeps this data under its own policies. You consent in Stripe's flow before any images are taken.
- Professional details (optional): profession, license state, license number, and employer or agency, if you ask to be verified.
- Listings: property address, map location, photos, price, availability, and description. We remove hidden photo metadata, such as camera location, when photos are uploaded.
- Messages and inquiries: what you send through the Service, including move-in dates, length of stay, and photos or documents you attach. Attachments are stored privately and can be opened only by the two people in the conversation and, when needed for safety, our team.
- Stays: booking requests and their status, listing calendars (including dates imported from calendar links a Host connects), tours, housing requests, screening requests (their status only, never the report), and leases with their electronic signature records: the names typed, times, IP addresses, browser details, and a fingerprint of the document.
- Reviews: ratings and reviews you write and responses to them.
- Devices for notifications: if you turn on push notifications, an address your browser's push service gives us for that device.
- Payments: Stripe processes card payments. We never see or store full card numbers. We keep Stripe customer and subscription identifiers and billing status.
- Safety records: reports you file, users you block, and moderation decisions.
- Support: what you send through the contact form or by email.
- Technical data: IP address and browser type, which we use for security, rate limiting, and keeping you signed in.
- Usage data: pages you view, searches you run (place, dates, price and other filters), listings you open, and which links you click in our emails.
- How you found us: the site or campaign that sent you, such as a search engine, a partner's link, or a referral code.
- Alerts and interest forms: your email address and search when you ask for housing alerts, and your contact and property details when you tell us you are interested in hosting.
- Notes by our team: our staff may add notes and labels to an account or inquiry to provide support and handle sales follow-up.
- Business contact information: to invite property owners to list, we may use names and contact details from public records or business data providers. Anyone we contact this way can opt out in one click.
Cookies and similar technology
We use one essential cookie to keep you signed in. We measure how the site is used with our own analytics, which store a random visitor ID in your browser's local storage. That data stays in our database and is not shared with advertising or analytics companies. If your browser sends a Global Privacy Control or Do Not Track signal, we do not assign a visitor ID. We do not use advertising or cross-site tracking cookies. If you install the app, your browser caches the app's code (not your messages or account data) so it loads quickly.
How we use information
- To run the Service: accounts, search, listings, messaging, and billing.
- To send transactional email such as verification links, password resets, new message alerts, and billing notices. You can turn off message alerts in your account settings.
- To send reminders about your own activity, such as an unfinished listing or an unanswered inquiry, and the housing alerts you ask for. Every reminder and alert has an unsubscribe link.
- To send marketing email, such as new listings and tips, only if you opted in. Every marketing email has a one-click unsubscribe link.
- To understand and improve the Service: which searches find no homes, where to recruit hosts, and which channels bring new members.
- To keep the Service safe: preventing fraud and spam, reviewing listings and reports, and enforcing our Terms.
- To comply with the law and respond to lawful requests.
We do not sell your personal information, and we do not share it for targeted advertising.
Who can see your information
- Other users. Anyone can see a Host's public profile: first name, photo, bio, languages, the year they joined, their listings with an approximate location, verification badges, reviews, and how often and how quickly they reply. The exact address and check-in instructions are shared with a Renter once the Host accepts their booking, or earlier if the Host shares them. Once a conversation starts, both people see each other's name, photo, profile and messages, and Hosts see the Renter's verification badges, assignment details, and reviews from other Hosts. Signed-in Hosts can see housing requests, with the Renter's first name, profession, and request details. Published reviews are public and show the author's first name and photo. Email addresses and phone numbers are never shown to other users.
- Service providers that process data for us: hosting, email delivery, Stripe for payments and identity checks, Twilio for text messages, the push services run by Google, Apple, Mozilla, and Microsoft (which deliver encrypted notifications to your devices), Google and Apple when you use them to sign in, a routing provider that receives listing locations (never your personal details) to estimate drive times, and the map tile provider, which receives your IP address when a map loads.
- Legal and safety. When required by law, or when needed to protect users, the public, or the Service.
- Business transfers. If we are involved in a merger, acquisition, or sale of assets, subject to this policy.
- Partners and referrers. Staffing agencies and other partners who send people to us see only totals, such as how many signups came from their link, never your name or contact details. If you join through a referral link, the person who referred you can see that a referral signed up and whether it earned them a credit.
How long we keep information
We keep account data while your account exists. When you delete your account, we delete your profile, photo, phone number, listings, photos, saved homes, the conversations you took part in and their attachments, and your bookings, leases, and reviews. Both people receive a copy of each signed lease by email, so the other person keeps their copy. Copies can remain in encrypted backups for up to 14 days. We keep logs of delivered emails for 30 days, usage analytics for about 13 months, and security records for as long as needed to investigate abuse. When you unsubscribe, we keep your email address on a suppression list so we do not email you again.
Security
We use encrypted connections (HTTPS), hashed passwords, optional two-step sign-in, access controls, and limits on repeated requests. No system is perfectly secure, so please use a unique password and turn on two-step sign-in.
Your choices and rights
- Access and portability: download your data from Account settings.
- Correction: update your name, email, and professional details in Account settings.
- Deletion: delete your account from Account settings at any time.
- Email: turn message alerts, reminders, and marketing email on or off in Account settings, or use the unsubscribe link in any email.
- Texts and push: turn text alerts and push notifications on or off in Account settings, reply STOP to any text, or remove your phone number. We never use your phone number for marketing, and we do not sell or share it or your text consent with anyone.
Depending on where you live, including California, Colorado, Connecticut, Virginia, and other states, you may have rights to know, access, correct, and delete personal information, and to opt out of its sale or use for targeted advertising. We do not sell or share personal information for those purposes. To make a request, email [support email address]. We will verify your request and will not treat you differently for exercising your rights. You may use an authorized agent.
Children
The Service is for adults. We do not knowingly collect information from anyone under 18.
Health information
We are not a healthcare provider, and the Service is not designed to hold medical records. Please do not share health information in messages. Professional license details are not medical information.
Where data is stored
We operate in the United States, and your information is stored and processed there.
Changes
We will post updates here and change the effective date. If a change is material, we will notify you by email or on the Service.
Contact
[Company legal name]
[Company mailing address]
[support email address]