Privacy Policy

Information we collect

• Account and profile information: name, email, account details, professional or practice profile, photo, location, work history, skills, credentials and preferences you provide.
• Hiring activity: jobs, saved profiles or opportunities, applications, invitations, candidate stages, messages, interview proposals and hiring-team activity.
• Files and support requests: résumés, credential documents, portfolio images, contact-form messages and safety reports you submit.
• Billing information: subscription status, customer and payment references, invoices and billing activity. Stripe collects payment-method details through its payment pages.
• Technical information: session identifiers and request or security logs. Hosting and service providers may also process IP addresses, browser details and device information when delivering the service.

How we use information

We use information to operate accounts and profiles, support search and location matching, manage hiring activity, deliver messages and account emails, process subscriptions, scan uploaded files, respond to support requests and investigate misuse. We also use relevant records to protect access, resolve billing concerns and meet applicable legal obligations.

Profile visibility and sharing

Published practice profiles and public job opportunities may be viewed without an account. Live professional talent search is restricted to eligible signed-in practice users and follows professional visibility settings. Email, phone, exact home address, license numbers and private document paths are not displayed in talent search.

Applying, responding to an invitation or connecting shares the relevant profile and hiring activity with the practice’s authorized hiring team. Messages are available to authorized conversation participants, which may include hiring-team members. Information you choose to include in a résumé or message can be seen by people authorized to access it.

Documents and file safety

Résumés and credential documents use private storage with access checks and time-limited download links. Document and portfolio visibility settings affect who can access those files. Uploaded files may be sent to a file-scanning provider to check for harmful content. A clean scan does not verify a credential or guarantee that a file is safe.

Do not upload patient information or confidential records. See our community guidelines and trust and credentials page for sharing requirements.

Service providers

We use providers to host the website, authenticate accounts, store data and files, process payments, send email, match locations and scan uploads. These include Vercel, Supabase, Stripe, Resend, Mapbox and the configured file-scanning service, currently Bouncer. Relevant information is sent to each provider to perform its function; for example, a location query goes to Mapbox and a file selected for scanning goes to the scanner.

Providers may process information in the United States or other countries under their service and privacy terms. Payment pages and other external websites have their own privacy policies.

Safety reports and authorized access

Authorized Rozah reviewers may access a safety report, its related conversation and the reporter’s verified account email to investigate and follow up. Reports and private reviewer notes are not displayed to the reported party. We may also disclose information when required by law or when reasonably necessary to address fraud, security concerns or threats to safety.

Cookies and browser storage

Rozah uses cookies and browser storage for sign-in sessions, the selected practice workspace, a remembered account email and unfinished profile-form drafts. You can clear these through your browser settings; doing so may sign you out or remove saved drafts. Blocking necessary cookies can prevent account features from working.

Your choices and requests

You can edit profile details and visibility settings in your account. To request access to, correction of or deletion of personal information, use the available account controls or contact support@joinrozah.com. We may need to verify your identity and authority before acting. Available rights and exceptions depend on applicable law.

Retention and account deletion

We retain information as needed to provide the service, maintain hiring history, handle billing and safety matters, resolve disputes and comply with legal requirements. Account deletion is requested in Settings and includes a 30-day recovery period. Practice owners may need to resolve active hiring activity, teammates or ownership before deletion can proceed.

Deletion is not immediate removal of every record. Some hiring, billing, safety and audit records may remain, including anonymized records and information available to other conversation participants. Backups and service-provider records follow their own retention and deletion processes. Contact support for questions about a specific record or request.

Policy updates

We update this page when our practices change and revise the date above. We will provide additional notice or seek consent for material changes when required by law.