Privacy Policy

PMHNP Hiring (the "Service") is operated by Akari Labs LLC, a Wyoming limited liability company with its registered office at 30 North Gould Street, Sheridan, WY 82801, United States ("Akari Labs LLC", "we", "us", "our"). For purposes of EU/UK GDPR and similar privacy laws, Akari Labs LLC is the data controller for personal data processed through PMHNP Hiring.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. Please read it carefully. If you do not agree with this policy, please do not access the Service.

1. Information We Collect

We may collect information about you in a variety of ways:

Personal Data

• Email addresses: When you subscribe to job alerts, save drafts, or post jobs
• Employer information: Company name, job posting details, contact information when posting jobs
• Payment information: Processed securely through Stripe (we do not store credit card details)

Automatically Collected Information

• Usage data: Pages visited, time spent on pages, links clicked, search queries
• Device information: Browser type, operating system, IP address
• Cookies and local storage: We use cookies and browser local storage to remember your preferences and saved jobs

2. How We Use Your Information

• To send job alerts: Email notifications about jobs matching your criteria (only if you've subscribed)
• To process job postings: Publish and manage job listings from employers
• To improve our service: Analyze usage patterns to enhance user experience
• To communicate with you: Send confirmation emails, dashboard links, renewal reminders
• To process payments: Handle transactions through our payment processor
• To prevent fraud: Monitor and prevent fraudulent or suspicious activity

3. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties.

Service Providers (sub-processors)

We use the following sub-processors to operate the service. Each receives only the data necessary for its specific function and is bound by a Data Processing Agreement. The complete current list with processing locations and DPA links is maintained at our sub-processors page.

• Vercel: Application hosting and performance telemetry (Speed Insights — only after analytics consent).
• Supabase: Database, authentication, and file storage (resumes, profile assets).
• Stripe: Payment processing for employer job postings (hosted Checkout — card data never touches our servers).
• Resend: Transactional and marketing email delivery.
• Google Analytics 4: Aggregate site analytics. Loads only after explicit analytics consent. IP anonymization and Google Signals are disabled. We honor Global Privacy Control (GPC) signals.
• Sentry: Application error monitoring (build-time wired; client-side reporting currently disabled).

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our service.

What Are Cookies?

• Essential functionality: Remember your preferences and settings
• Analytics: Understand how visitors use our site (privacy-friendly methods)
• Security: Protect against fraudulent activity

Local Storage

• Save your job searches and filters
• Remember jobs you've saved or applied to
• Store draft job posting data

You can control cookies through your browser settings. Disabling cookies may limit some features.

5. Data Security

• Encryption: All data is encrypted using HTTPS/TLS
• Secure storage: Personal data stored in secure, access-controlled databases
• Payment security: Handled by Stripe (PCI DSS compliant). We never store your credit card details
• Access controls: We limit access to personal information to authorized personnel only

No method of transmission over the Internet is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Your Privacy Rights

Access and Portability

You can request a copy of the personal information we hold about you.

Correction

You can update or correct your information at any time through your dashboard or by contacting us.

Deletion

You can request deletion of your personal information. We may retain certain information for legal purposes.

Unsubscribe from Emails

• Click the "Unsubscribe" link in any email we send you
• Contact us at support@pmhnphiring.com

To exercise any of these rights, contact us at support@pmhnphiring.com. We will respond within 30 days.

7. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for their privacy practices. When you click "Apply Now", you may be directed to the employer's website, governed by their privacy policy.

8. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you by updating the "Last updated" date, sending email notifications, and posting a notice on our homepage.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

• Data controller: Akari Labs LLC
• Mailing address: 30 North Gould Street, Sheridan, WY 82801, United States
• Email: privacy@pmhnphiring.com (privacy-specific) or support@pmhnphiring.com
• Subject line: "Privacy Inquiry"

For general questions, visit our FAQ page or Contact page.

11. Data Retention

We keep personal data only as long as necessary for the purpose for which it was collected, plus any retention required by law:

• Active job seeker profile: retained while your account is active. Inactive accounts (no login for 24 months) are anonymized and resumes purged.
• Job applications: retained while the employer's job posting is active, plus 90 days for dispute resolution, then archived.
• Employer postings & billing records: retained 7 years to satisfy US tax and audit obligations.
• Email logs (deliverability): 90 days.
• Analytics events (Google Analytics): 14 months (the shortest retention setting GA4 allows).
• Account deletion: on request, we soft-delete immediately and hard-purge after a 30-day grace period during which the deletion can be reversed.

12. Automated Decision-Making and AI

We use a candidate-matching algorithm (an AI model) to suggest jobs that may be a good fit and to surface relevant applicants to employers. The output is a non-binding score; a human (the employer) makes the final hiring decision.

Under GDPR Article 22 you have the right to obtain human review of any decision that is based solely on automated processing. Because our matching is decision-support, not decision-making, this rarely applies — but if you believe the algorithm has produced an unfair outcome, contact privacy@pmhnphiring.com and we will review.

13. Sensitive Information

Some fields in your profile are sensitive under GDPR Article 9 or treated as "sensitive personal information" under CPRA. We collect them only when you choose to provide them and only for the specific purpose described:

• Race / ethnicity, gender, disability status, veteran status (EEO data): entirely optional; provided to help employers meet voluntary diversity-reporting goals. Hidden from employer-facing views by default. You can clear these fields at any time from your profile.
• NPI and DEA numbers: credentialing identifiers used to verify clinical licensure. Visible only to employers you apply to.
• Resume content: health-history items you choose to disclose are visible to any employer you apply to. We do not parse or infer health-condition data.

We never use sensitive fields for advertising or to train AI models, and we never share them with sub-processors beyond what is required to display them in the application form.

14. California Privacy Rights (CCPA / CPRA)

• The right to know what personal information we collect, use, and disclose.
• The right to delete personal information.
• The right to correct inaccurate personal information.
• The right to opt-out of the "sale" or "sharing" of personal information for cross-context behavioral advertising.
• The right to limit the use of sensitive personal information.
• The right to non-discrimination for exercising any of these rights.

We do not sell personal information for money. Loading analytics or advertising scripts may meet the broader CPRA definition of "sharing". To opt out, click Do Not Sell or Share My Personal Information or send a Global Privacy Control signal from your browser — we honor both.

To exercise any other CCPA right, file a request through our Data Request form or email privacy@pmhnphiring.com with "CCPA Request" in the subject. We respond within 45 days.

15. European Privacy Rights (GDPR / UK GDPR)

• Access, rectification, erasure, restriction, data portability, and objection.
• Withdrawal of consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• The right to lodge a complaint with your supervisory authority — for the EU, find yours at edpb.europa.eu; for the UK, the Information Commissioner's Office at ico.org.uk.

File requests through our Data Request form. We respond within 30 days.

16. Cross-Border Transfers

Most of our sub-processors are based in the United States. Where personal data of EEA, UK, or Swiss residents is transferred outside its country of origin, the transfer relies on Standard Contractual Clauses (SCCs) included in each sub-processor's DPA, supplemented by encryption in transit and at rest.