PUBLIC WEBSITE PRIVACY POLICY

‍

SnapMedTech, Inc. dba SnapCare and connectRN, Inc.

‍

Effective Date: November 02, 2026

Last Updated: October 28, 2026

‍

SnapMedTech, Inc. d/b/a SnapCare (“SnapCare”) and connectRN, Inc. (“connectRN”) are affiliated companies under common ownership by MedStaff Technologies, Inc. (collectively, the “Companies,” “we,” “us,” or “our”).

‍

We respect your privacy and are committed to protecting personal information. This Public Website Privacy Policy (“Public Privacy Policy”) explains how we collect, use, disclose, retain, and protect personal information when individuals visit our public websites, communicate with us about our services, or otherwise interact with us in a business or commercial capacity.

‍

This Policy applies to:

  • Visitors to www.snapcare.com and www.connectrn.com;
  • Representatives of healthcare facilities and current or prospective customers;
  • Vendors, business partners, and their representatives;
  • Individuals who contact us for general information; and
  • Other individuals interacting with the Companies in a business or commercial capacity.

Although SnapCare and connectRN operate under common ownership and provide similar healthcare staffing and workforce solutions, their information practices may not be identical. The categories of information collected, purposes of use, third-party recipients, and retention practices may differ depending on the Company, website, platform, or service involved. Where material differences exist, those practices are identified in this Policy.

‍

Important Notice for Clinicians and Applicants

‍

If you are a healthcare professional who applies for employment or assignments, creates a clinician account, submits credentialing information, uses a clinician-facing platform, or performs services through SnapCare or connectRN, additional privacy practices apply.

‍

Please review our separate SnapCare and connectRN Clinician and Applicant Privacy Notice, which addresses employment, credentialing, background screening, occupational-health information, payroll, assignments, and other clinician-related information.

‍

This Public Privacy Policy also applies to your interactions with the public portions of our websites. More specific notices provided during application, account creation, or onboarding supplement this Policy.

‍

1. PERSONAL INFORMATION WE MAY COLLECT

‍

The categories of personal information collected by SnapCare and connectRN may differ depending on the website, services, and nature of the interaction. The categories described below represent information collected by one or both Companies and should not be interpreted as indicating that each Company collects every category listed.

‍

During the preceding twelve (12) months, the Companies have collected the following categories of personal information through their public websites and business interactions, as applicable.

‍

A. Identifiers and Contact Information

‍

  • Name;
  • Business or personal email address;
  • Telephone number;
  • Mailing address;
  • Company or organization;
  • Job title;
  • Internet Protocol (IP) address;
  • Device and cookie identifiers;
  • Account or login information, where applicable; and
  • Other information provided when contacting us.
B. Professional and Business Information

‍

  • Employer or organization;
  • Job title and professional role;
  • Staffing needs and business interests;
  • Communications with the Companies;
  • Information concerning existing or prospective commercial relationships; and
  • Other professional information voluntarily provided.
C. Internet, Device, and Website Activity

‍

We may collect:

  • IP address;
  • Browser and device type;
  • Operating system;
  • Device and advertising identifiers;
  • Pages viewed and links selected;
  • Referring and exit pages;
  • Dates and times of visits;
  • Interactions with forms, advertisements, and website features;
  • Cookie, pixel, and similar technology identifiers; and
  • Other information concerning use of our websites.
D. General Geolocation Information

‍

We may derive approximate geographic location from IP addresses or device information.

‍

Our general public websites do not ordinarily require precise geolocation information. Location information collected through clinician-facing applications is addressed in the SnapCare and connectRN Clinician and Applicant Privacy Notice.

‍

E. Communications and Inquiry Information

‍

  • Contents of inquiries;
  • Emails and other correspondence;
  • Information submitted through website forms;
  • Customer-service communications;
  • Survey responses; and
  • Other information voluntarily provided.
F. Commercial Information

‍

  • Services in which an individual or organization has expressed interest;
  • Existing or prospective customer relationships;
  • Requests for proposals, demonstrations, or information;
  • Website and marketing interactions; and
  • Other commercial interactions with the Companies.
G. Inferences

‍

We may derive inferences from website and commercial activity, including likely interests in particular staffing services, workforce solutions, or marketing content.

‍

H. Sensitive Personal Information

‍

Our public websites are not intended to collect Sensitive Personal Information (“SPI”), as defined under applicable privacy laws, from ordinary website visitors except where specifically requested for a legitimate business purpose. Please do not submit Social Security numbers, financial-account information, medical records, or other highly sensitive information through general website inquiry forms.

‍

Certain SPI may be collected through our clinician application, credentialing, employment, and staffing processes, as described in our separate SnapCare and connectRN Clinician and Applicant Privacy Notice.

‍

2. SOURCES OF PERSONAL INFORMATION

‍

We may collect personal information:

  • Directly from you;
  • Automatically through our websites;
  • From your employer or organization;
  • From business partners and referral sources;
  • From advertising and analytics providers;
  • From social-media platforms;
  • From publicly available professional or business sources;
  • From our affiliated companies; and
  • From other sources permitted by law.

The particular sources may differ depending on whether you interact with SnapCare or connectRN.

‍

3. HOW WE USE PERSONAL INFORMATION

‍

We may use personal information to:

  • Operate, maintain, and secure our websites;
  • Respond to inquiries and requests;
  • Provide information about our services;
  • Develop and manage customer and business relationships;
  • Communicate with current and prospective customers;
  • Respond to requests for proposals and other commercial inquiries;
  • Manage vendor and business-partner relationships;
  • Authenticate users where applicable;
  • Prevent fraud, abuse, and security incidents;
  • Troubleshoot and improve our websites;
  • Understand website usage and conduct analytics;
  • Measure advertising and marketing effectiveness;
  • Market our services and personalize marketing content;
  • Coordinate business operations and services between SnapCare and connectRN;
  • Comply with legal, regulatory, contractual, and audit obligations;
  • Establish, exercise, or defend legal claims;
  • Protect the rights, safety, and property of the Companies and others;
  • Facilitate mergers, acquisitions, reorganizations, financings, and other corporate transactions; and
  • Fulfill other purposes disclosed at the time of collection or otherwise permitted by law.

We seek to collect, use, and retain personal information only to the extent reasonably necessary and proportionate to the purposes for which it is processed.

‍

4. COOKIES, PIXELS, ANALYTICS, AND ADVERTISING TECHNOLOGIES

‍

You may manage applicable cookies and advertising preferences through the Cookie Preferences or Your Privacy Choices controls available on the relevant website. Additional information about the technologies we use is available in our Cookie Policy.

‍

We share certain personal information, including online identifiers and internet or other electronic network activity, with the following categories of third parties for cross-context behavioral advertising and related marketing purposes:

  • Advertising networks and advertising technology providers;
  • Social media platforms; and
  • Digital marketing and advertising measurement providers.

These disclosures may be used to deliver relevant advertising, measure advertising effectiveness, develop advertising audiences, and evaluate marketing campaigns. The particular third parties involved may differ between SnapCare and connectRN.

‍

5. SALE, SHARING, AND TARGETED ADVERTISING

‍

SnapCare and connectRN do not sell personal information in exchange for monetary payment. However, we use third-party advertising and analytics technologies that may involve the disclosure of certain personal information for cross-context behavioral advertising, which constitutes “sharing” under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”).

‍

During the preceding twelve (12) months, the categories of personal information we have shared for these purposes include:

  • Identifiers, such as IP addresses, cookie identifiers, device identifiers, and other online identifiers; and
  • Internet or other electronic network activity, such as browsing activity, pages visited, links selected, and interactions with our websites.
Your Right to Opt Out

‍

You have the right to opt out of the sale or sharing of your personal information, as those terms are defined under applicable privacy laws.

You may exercise this right at any time through the Your Privacy Choices link available on the applicable website.

‍

6. GLOBAL PRIVACY CONTROL AND DO NOT TRACK

‍

The Companies recognize and honor qualifying browser-based opt-out preference signals, including Global Privacy Control (“GPC”), as required by applicable law. When we receive a qualifying GPC signal, we treat it as a request to opt out of the sale or sharing of personal information associated with the browser or device transmitting the signal. No additional action is required to exercise an applicable GPC opt-out. Where required by applicable law, we apply qualifying opt-out preference signals to associated accounts in accordance with applicable requirements.

‍

GPC is different from a traditional browser “Do Not Track” (“DNT”) setting. Because there is no universally accepted standard governing traditional DNT signals, we do not necessarily respond to those signals unless required by law. Our treatment of traditional DNT signals does not affect our obligation to honor GPC or other legally recognized opt-out preference signals.

‍

7. HOW WE DISCLOSE PERSONAL INFORMATION

‍

We may disclose personal information to the following categories of recipients where reasonably necessary for legitimate business purposes or otherwise permitted by law.

‍

A. Summary of Personal Information and Recipient Categories

‍

Disclosure Table for CCPA Purposes

Category of Personal Information
Categories of Recipients
Identifiers and contact information
Website traffic measurement and analytics
Professional and business information
Advertising, conversion measurement, and remarketing
Internet, device, and website activity
Advertising measurement, audience development, and remarketing
Commercial inform
Advertising measurement and related marketing activities
Communications and inquiries
Advertising measurement and professional audience marketing
General geolocation information
Advertising measurement and related marketing activities FullStory Session monitoring and website diagnostics
Inferences
Analytics providers, marketing service providers, and affiliated companies, where applicable

‍

B. Customers and Business Partners

‍

We may disclose information reasonably necessary to provide staffing and workforce services, respond to business inquiries, and administer existing or prospective commercial relationships.

‍

C. Affiliated Companies

‍

SnapCare and connectRN are affiliated companies under common ownership.

‍

The Companies may disclose personal information to one another and to their parent company, MedStaff Technologies, Inc., where reasonably necessary for legitimate business purposes, including:

  • Coordinating business operations;
  • Managing customer relationships;
  • Providing integrated or complementary services;
  • Maintaining and improving technology systems;
  • Administering shared business functions;
  • Supporting information security and compliance; and
  • Facilitating operational integration.

Information shared among affiliated companies remains subject to applicable privacy, confidentiality, security, and other legal requirements.

‍

E. Professional Advisors

‍

Including attorneys, accountants, auditors, consultants, insurers, and financial advisors.

‍

F. Government and Legal Recipients

‍

We may disclose personal information where required or permitted by law, subpoena, court order, governmental request, regulatory obligation, or where necessary to establish, exercise, or defend legal rights.

‍

G. Corporate Transactions

‍

Personal information may be disclosed in connection with an actual or contemplated merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or similar transaction.

‍

H. At Your Direction or With Your Consent

‍

We may disclose personal information when you direct or authorize us to do so or otherwise provide consent. The specific categories of information disclosed and recipients may differ between SnapCare and connectRN depending on the website, services, and nature of the interaction.

‍

8. DATA RETENTION

‍

The Companies retain personal information only for as long as reasonably necessary and proportionate to the purposes for which it was collected, unless a longer period is required or permitted by law.

‍

Retention periods may differ between SnapCare and connectRN depending on their respective systems, business processes, contractual requirements, and applicable legal obligations.

‍

The following general retention periods apply, unless a longer or shorter period is required by applicable law or necessary to preserve records relating to a claim, investigation, audit, or other legal obligation:

‍

Category
General Retention Period
Applicant and recruiting records
Generally up to 3 years following the final application decision or last meaningful recruiting activity
Personnel and employment records
Generally for the duration of employment and up to 7 years thereafter
Payroll, tax, and timekeeping records
Generally 7 years after the applicable reporting period
Credentialing and licensing records
Generally up to 7 years following the last assignment or termination of the relationship
Background-screening records
Based on applicable screening and employment recordkeeping requirements, with underlying reports retained only as necessary
Medical and occupational-health records
Based on applicable healthcare, employment, occupational-health, and safety requirements
Assignment and scheduling records
Generally 7 years after the applicable assignment
Website and application activity
Based on the applicable technology, security requirements, and documented retention settings
Precise geolocation information
Retained only as necessary for assignment verification, timekeeping, billing, security, or other disclosed purposes

‍

Certain records, including Form I-9 documentation and OSHA-covered medical or exposure records, are subject to specialized retention requirements. When information is no longer required for an authorized purpose, we take appropriate steps to delete, deidentify, or otherwise dispose of it in accordance with applicable law and our retention policies.

‍

9. INFORMATION SECURITY

‍

The Companies maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, destruction, or loss.

‍

Depending on the information and systems involved, these safeguards may include access controls, authentication, encryption, security monitoring, employee confidentiality obligations, vendor security requirements, and incident-response procedures.

‍

We seek to limit third-party access to personal information to what is reasonably necessary for authorized business purposes.

‍

No security system can guarantee absolute protection, and the Companies cannot guarantee that unauthorized access, use, or disclosure will never occur.

‍

10. CALIFORNIA PRIVACY RIGHTS

‍

Depending on your state of residence and applicable law, you may have certain rights regarding your personal information. The following describes rights available to California residents under the CCPA. Residents of other states may have similar or additional rights, as described in Section 11.

‍

A. Right to Know and Access

‍

You may request information concerning personal information collected about you, including:

  • Categories of personal information;
  • Categories of sources;
  • Business or commercial purposes for collection, use, sale, or sharing;
  • Categories of third parties to whom information is disclosed;
  • Categories of information sold or shared;
  • Categories disclosed for business purposes; and
  • Specific pieces of personal information, subject to applicable restrictions.
B. Right to Delete

‍

You may request deletion of personal information collected from you, subject to applicable exceptions.

‍

C. Right to Correct

‍

You may request correction of inaccurate personal information maintained about you.

‍

D. Right to Opt Out of Sale or Sharing

‍

You may direct the Companies not to sell or share your personal information as those terms are defined by California law.

‍

You may exercise this right through the applicable website's Your Privacy Choices control or a qualifying GPC signal.

‍

E. Right to Limit Use or Disclosure of Sensitive Personal Information

‍

To the extent either Company uses or discloses SPI for purposes subject to the right to limit under the CCPA, you may exercise that right through the applicable privacy-request mechanism.

‍

Certain uses of sensitive personal information necessary to provide requested services, maintain security, comply with law, or perform other permitted activities may not be subject to this limitation right.

‍

F. Right to Non-Discrimination and Non-Retaliation

‍

The Companies will not unlawfully discriminate or retaliate against you because you exercise a right provided by the CCPA.

‍

We will not unlawfully deny goods or services, charge different prices or rates, provide a different level or quality of services, or otherwise treat you adversely because you exercise an applicable privacy right.

‍

Where permitted by law, the Companies may offer financial incentives related to personal information, subject to applicable notice, consent, and withdrawal requirements.

‍

G. Authorized Agents

‍

You may designate an authorized agent to submit certain requests on your behalf. We may require reasonable verification of the agent's authority and your identity as permitted by law.

‍

11. OTHER STATE PRIVACY RIGHTS

‍

Residents of certain states other than California may have additional rights under applicable comprehensive privacy laws, including rights to access, correct, delete, or obtain copies of personal information; opt out of targeted advertising or qualifying sales; and appeal certain privacy-request decisions.

‍

The availability and scope of these rights vary by jurisdiction and may be subject to exceptions for employment, healthcare, business-to-business, or other information. The Companies will process requests in accordance with applicable law.

‍

12. HOW TO EXERCISE YOUR PRIVACY RIGHTS

‍

You may submit applicable privacy requests through:

‍

Mail:

SnapMedTech, Inc. d/b/a SnapCare

connectRN, Inc.

Attn: Privacy

999 Peachtree Street NE

Suite 400

Atlanta, Georgia 30309

‍

Online Privacy Request Form: https://link.snapcare.com/online-privacy-request-form

Privacy Email: privacy@snapcare.com

Toll-Free Telephone: (617) 944-1515

‍

When submitting a request, please identify whether it relates to SnapCare, connectRN, or both, if known.

‍

The Companies may use a shared privacy-request administration process. Requests will be evaluated and fulfilled by or on behalf of the applicable Company or Companies in accordance with their legal obligations.

‍

We may request information reasonably necessary to verify your identity or authority to make a request.

‍

We will respond within the periods required by applicable law.

‍

13. MARKETING COMMUNICATIONS

‍

You may unsubscribe from promotional emails through the unsubscribe mechanism included in the communication.

‍

You may opt out of marketing text messages by following the instructions provided in the applicable message.

‍

Even if you opt out of promotional communications, the Companies may continue to send non-promotional communications relating to existing business relationships, transactions, security matters, or other service-related purposes.

‍

14. THIRD-PARTY WEBSITES AND SERVICES

‍

Our websites may contain links to websites, platforms, or services operated by third parties.

‍

The Companies are not responsible for the independent privacy practices of third parties. We encourage you to review their privacy policies before providing personal information.

‍

15. CHANGES TO THIS PRIVACY POLICY

‍

We may update this Policy from time to time to reflect changes in our information practices, technologies, services, business operations, or legal obligations.

‍

The “Last Updated” date identifies the most recent revision.

‍

Where required by law, we will provide additional notice regarding material changes.

‍

16. CONTACT INFORMATION

‍

For questions about this Policy or our privacy practices, please contact us using the information provided in Section 12.