Privacy Policy

1Scope

This Privacy Policy explains how Hey'Lette, Inc. ("Hey'Lette," "we," "us") collects, uses, shares, and protects personal information when you use our mobile apps, websites (including hey-lette.com), and related services (the "Services").

Hey'Lette, Inc. is a Delaware corporation headquartered in Niagara Falls, New York, and is the controller responsible for your information. This Policy is part of our Terms of Service.

2Information we collect

Information you provide

Information collected automatically

Information from third parties

We may receive information from hospitals or health systems (for example, in connection with Hey'Lette Direct), agencies, employer-of-record (EOR) providers, and service providers, where relevant to your use of the Services and permitted by law.

3How we use information

We use personal information to:

• Provide, operate, and maintain the Services and your account;
• Match you with opportunities and surface relevant listings, safety insights, and stipend estimates;
• Process subscriptions, payments, and sponsorships;
• Communicate with you, including service messages and (where permitted) marketing;
• Personalize and improve the Services and develop new features;
• Maintain safety and security, prevent fraud and abuse, and enforce our Terms;
• Comply with legal obligations and protect our rights.

Where required by law (for example, for users in the EU/EEA or Canada), we rely on legal bases such as performing our contract with you, your consent, our legitimate interests, and compliance with legal obligations.

4Location data

Some features use location to be useful. We use approximate or — with your permission — more precise location to power neighborhood and city safety scores (derived from public data sources such as government crime and geographic datasets) and to estimate per-diem and stipend rates (derived from published government rate tables). You can control location permissions in your device settings; turning them off may limit certain features.

5How we share information

We share personal information only as needed to run the Services:

• Hospitals & health systems — when you apply to or engage with a Hey'Lette Direct opportunity, we share relevant profile and application information with that organization.
• Agencies & EOR providers — when you pursue an opportunity or assignment, we share information needed to facilitate it (for example, with an employer-of-record provider handling a placement).
• Service providers — vendors who process information on our behalf under contract (see Section 6).
• Legal & safety — when required by law, to respond to legal process, or to protect the rights, safety, and property of Hey'Lette, our users, or others.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under applicable U.S. state privacy laws.

6Service providers

We rely on trusted vendors to operate the Services, including (among others):

• Payment provider — payment processing and subscription billing;
• Push-notification provider — delivery of mobile push notifications;
• Cloud hosting & database providers — application hosting and data storage;
• Analytics & diagnostics providers — performance, crash, and usage analytics.

These providers may process information only on our instructions and are contractually required to protect it.

7Cookies & analytics

Our website uses cookies and similar technologies to keep you signed in, remember preferences, and understand how the site is used. You can control cookies through your browser settings. Within our mobile apps we use device identifiers and SDKs for similar purposes. Disabling some of these may affect functionality.

8Data retention

We keep personal information for as long as your account is active and as needed to provide the Services, then retain it as required to comply with legal, tax, accounting, and dispute-resolution obligations, after which we delete or de-identify it. You can request deletion as described in Section 11.

9Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we can't guarantee absolute security. Please protect your account credentials and notify us of any suspected compromise.

10International transfers

Hey'Lette is based in the United States, and our infrastructure and service providers are located primarily in the United States. If you access the Services from Canada or elsewhere, your information may be transferred to and processed in the United States, where data-protection laws may differ from those in your location. For Canadian users, we handle personal information in a manner consistent with applicable privacy laws, including PIPEDA. Where required, we use appropriate safeguards for cross-border transfers.

11Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email privacy@hey-lette.com. We'll verify your request and respond as required by law, and we won't discriminate against you for exercising your rights.

U.S. state privacy rights

Residents of California and certain other U.S. states have rights to know, access, correct, and delete personal information, and to opt out of any "sale" or "sharing" of personal information. As noted above, we do not sell or share personal information for cross-context behavioral advertising. You may use an authorized agent and may appeal a denial by contacting us.

Canadian privacy rights

Canadian users may request access to and correction of their personal information and may withdraw consent, subject to legal and contractual limits, consistent with PIPEDA.

12Children's privacy

The Services are intended for adults (18+) and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact support@hey-lette.com and we'll delete it.

13Notifications & communications

With your consent and device settings, we send push notifications and may send email or text messages about your account and (where permitted) promotions. You can manage or turn off these messages in your device or app settings, or by using the unsubscribe option in marketing emails. Essential service messages may still be sent while your account is active.

14Changes to this Policy

We may update this Policy from time to time. If we make material changes, we'll provide notice by posting the updated Policy with a new effective date or by notifying you in-app. Your continued use of the Services after changes take effect means you accept the updated Policy.

15Contact us

For privacy questions or to exercise your rights:

Hey'Lette, Inc. — Attn: Privacy
Email: support@hey-lette.com