Privacy Policy
Workforce ID is an early-stage project. Right now this site does exactly one thing: it collects a short form so we can understand how credentialing actually works for the people who live with it, and email you when there's something to try.
Two things we want to be direct about
We do not verify credentials. Nothing you enter here is checked against a state licensing board, a certifying body, a school, or any other primary source. Nothing on this site is a verified credential, and it should not be relied on by any employer, agency, or facility for a credentialing, privileging, or hiring decision.
We are not asking for sensitive personal information. There is no field on this site for your Social Security number, date of birth, driver's license, immunization records, or credential documents. Please don't send them to us. If that changes, this policy will change first, and we'll tell you.
Who we are
Workforce ID (myworkforceid.com). Questions, corrections, or deletion requests: privacy@myworkforceid.com. A human reads that inbox.
What we collect
Only what you type into the form, plus a small amount of technical information that comes with any web request.
If you're a clinician
| Category | Fields |
|---|---|
| Contact | First name, last name, email address, phone number (optional) |
| Professional | Role, primary specialty, years of experience, primary state of residence, states you're licensed in, types of work you're looking for |
| Experience | Number of agencies you've submitted to, hours spent on credentialing paperwork, whether you've lost or delayed an assignment, which parts frustrate you, and anything you write in the open comment box |
| Preference | Whether you're open to a short interview |
We derive one thing you don't type: whether your state of residence participates in the Nurse Licensure Compact. That's computed from the state you select.
If you're an agency or facility
| Category | Fields |
|---|---|
| Contact | Organization name, organization type, your name, your role, work email address |
| Operational | Clinicians credentialed per month, time to complete a file, whether you use a CVO, your described bottleneck, pilot interest |
Technical information
- A referral tag if you arrived through a link with one (for example
?ref=), so we know which outreach worked - Your IP address is transmitted to Cloudflare as part of the anti-bot check described below. We do not store it in our database.
- Standard server logs kept by our hosting providers
What we do not collect
- No cookies for tracking. We set no advertising or analytics cookies. Cloudflare's bot check may set a short-lived functional cookie in your browser purely to complete that check.
- No advertising pixels, no third-party trackers, no session recording.
- No Social Security numbers, dates of birth, government ID numbers, financial information, or health information — including immunization records.
- No credential documents or uploads of any kind.
Why we collect it
- To contact you about early access, and only about that
- To understand which credentialing problems are worth solving first
- To arrange a short conversation, if you told us you're open to one
- To produce aggregate, de-identified summaries — for example "62% of respondents cited expiration tracking." Aggregates never identify you.
Who we share it with
We do not sell your information, and we do not share it with staffing agencies, recruiters, hospitals, or data brokers. Submitting this form does not put you in front of any employer.
Three service providers process data on our behalf, under their own security obligations:
| Provider | Role |
|---|---|
| Supabase | Database and application hosting (United States) |
| Cloudflare | Domain, site delivery, and anti-bot verification |
| Email provider | Sending the emails you asked for |
We may also disclose information if legally required to, or to protect the safety or rights of a person.
How it's protected
- Encrypted in transit (TLS) and at rest
- Submissions are written by a server-side function; the public page holds no key that can read or modify the database
- Row-level security is enabled, with no policy permitting anonymous or authenticated read access
- Access limited to people who need it
No system is perfectly secure, and we won't pretend otherwise. That's part of why we're not collecting sensitive data at this stage.
How long we keep it
Until you ask us to delete it, or until it stops being useful — whichever comes first. If this project is discontinued, we'll delete the data rather than transfer it.
Your choices
Wherever you live, you can ask us to:
- See what we hold about you
- Correct anything that's wrong
- Delete it entirely
- Stop emailing you — every email has an unsubscribe link, or just reply and say so
Email privacy@myworkforceid.com and we'll respond within 30 days. We won't ask you to justify the request, and we won't treat you differently for making one.
If you're a California resident: we do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not use it for cross-context behavioral advertising. The rights above cover the access, correction, deletion, and opt-out rights available to you.
Anti-bot verification
Our forms use Cloudflare Turnstile to distinguish people from automated scripts. Turnstile receives your IP address and limited browser signals. It is designed to work without tracking you across sites, and Cloudflare states it does not use the data for advertising. See Cloudflare's privacy policy.
Children
This site is for working healthcare professionals and is not directed to anyone under 18. We don't knowingly collect information from minors.
Where data is held
In the United States. If you're outside the US, submitting the form means your information will be processed there.
Changes
If we change this policy in a way that affects information you've already given us — particularly if we ever begin collecting sensitive data or verifying credentials — we'll email everyone on the list before it takes effect, not after.
In one sentence
We collect a short form, we don't verify anything, we don't sell anything, and you can have it all deleted by sending one email.