Privacy Policy

1. Introduction

This Privacy Policy describes how Mizu Health ("we," "us," or "our") collects, uses, shares, and protects your personal information when you use crna.jobs (the "Site") and other Mizu Health services.

crna.jobs is part of the Mizu Health network of specialty-specific job boards. When you create an account on this Site, your information is stored in the Mizu Health platform and this Privacy Policy applies to all Mizu Health services you access.

By using the Site, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree, please do not use the Site.

2. Information We Collect

2.1 Information You Provide

When you create an account, build your profile, or apply to jobs, you may provide:

• Contact information: Name, email address, phone number
• Professional information: Work experience, education, credentials, licenses, certifications, NPI number, years of experience
• Preferences: Desired salary, preferred work locations and states, employment type preferences, job alerts
• Application materials: Resumes, cover letters, and other documents you submit
• Account credentials: Email address and password (stored securely as a hash)

2.2 Information Collected Automatically

When you use the Site, we automatically collect:

• Usage data: Pages viewed, jobs searched, time spent on pages, links clicked
• Device information: Browser type, operating system, device type, IP address
• Cookies and similar technologies: We use cookies to maintain your session, remember your preferences, and analyze site usage (see Section 8)

2.3 Information from Third Parties

We may receive information about you from:

• Credential verification services: When you authorize us to verify your NPI number or other professional credentials
• Healthcare organizations: If you apply to a job and the employer provides feedback or updates about your application

3. How We Use Your Information

We use your information to:

3.1 Provide Our Services

• Create and manage your account
• Display relevant job opportunities to you
• Process and submit your job applications
• Send you job alerts and notifications based on your preferences
• Communicate with you about your applications and account
• Verify your professional credentials when you authorize us to do so

3.2 Improve and Develop Our Platform

• Analyze usage patterns to improve site functionality and user experience
• Develop new features and services
• Conduct research and analytics about the healthcare job market
• Test and troubleshoot technical issues

3.3 Communicate with You

• Send transactional emails (application confirmations, account updates)
• Send marketing communications about new features or job opportunities (you can opt out)
• Respond to your questions and support requests
• Send important notices about changes to our Terms or Privacy Policy

3.4 Ensure Security and Prevent Fraud

• Protect against unauthorized access and security threats
• Detect and prevent fraudulent activity and abuse
• Verify user identity and credentials
• Enforce our Terms of Service

3.5 Comply with Legal Obligations

• Respond to legal requests and court orders
• Comply with applicable laws and regulations
• Protect our rights and the rights of others

4. How We Share Your Information

4.1 Anonymous Candidate Pool

Before you apply to a specific job, we may include limited information about you in an anonymous "candidate pool" visible to healthcare organizations. This pool includes only:

• First name (no last name)
• Whether you are NPI-verified
• Years of experience
• Preferred work state(s)
• Desired salary range

This information is presented in a way that makes it difficult to identify you individually. Your full profile is not shared unless you take action (see below).

4.2 Job Applications and Connections

When you apply to a job or request to connect with a healthcare organization, we share your full profile with that organization, including:

• Your full name and contact information
• Your complete professional profile and work history
• Your application materials (resume, cover letter, etc.)
• Any additional information you provide in your application

By applying to a job or requesting to connect, you explicitly authorize us to share this information with that organization.

4.3 Service Providers

We share information with third-party service providers who help us operate the Site, including:

• Cloudflare: Provides hosting, content delivery, security, bot protection (Turnstile), and web analytics
• Fly.io: Hosts our API infrastructure
• Credential verification services: When you authorize us to verify your professional credentials

These providers are contractually obligated to protect your information and use it only to provide services to us.

4.4 Legal Requirements and Safety

We may disclose your information if required by law or if we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Protect the safety of our users or the public
• Prevent fraud, security issues, or technical problems
• Protect our rights, property, or the rights of others

4.5 Business Transfers

If Mizu Health is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

4.6 Aggregated and De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you. For example, we may publish statistics about healthcare job market trends or salary ranges.

5. Data Security

We take the security of your information seriously and implement industry-standard measures to protect it, including:

• Encryption of data in transit using HTTPS/TLS
• Secure password storage using industry-standard hashing algorithms
• Authentication tokens stored in secure, HTTP-only cookies
• Regular security assessments and updates
• Access controls limiting who can view your information
• Cloudflare's security features including DDoS protection and bot mitigation

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials. Do not share your password with anyone, and notify us immediately if you suspect unauthorized access to your account.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. Specifically:

• Account data: Retained until you delete your account
• Application history: Retained to maintain historical records for you and hiring organizations
• Communications: Retained as necessary for customer support and legal purposes
• Analytics data: Aggregated usage data may be retained indefinitely for business insights

When you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements.

Some information may remain in backup systems for a limited time after deletion as part of our data recovery procedures.

7. Your Rights and Choices

7.1 Access and Update Your Information

You can access and update most of your information through your account settings. This includes your profile, preferences, and contact information.

7.2 Delete Your Account

You can delete your account at any time through your account settings. Once deleted, your profile will be removed from the candidate pool and you will no longer be able to apply to jobs or receive job alerts.

7.3 Opt Out of Marketing Communications

You can opt out of marketing emails by clicking the "unsubscribe" link in any marketing email or by updating your notification preferences in your account settings. You will still receive transactional emails related to your account and applications.

7.4 Control Job Alerts

You can manage your job alert preferences in your account settings, including turning them off entirely.

7.5 Data Portability

If you would like to receive a copy of your personal information in a portable format, please contact us at support@mizu.health.

7.6 Additional Rights

Depending on your location, you may have additional rights under applicable privacy laws, such as:

• The right to request correction of inaccurate information
• The right to request deletion of your information (subject to legal exceptions)
• The right to object to certain processing activities
• The right to lodge a complaint with a data protection authority

To exercise these rights, please contact us at support@mizu.health.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to provide and improve the Site.

8.1 Essential Cookies

These cookies are necessary for the Site to function and cannot be disabled:

• Authentication cookies: Keep you logged in to your account (stored as secure, HTTP-only cookies)
• Security cookies: Protect against bot activity and abuse (Cloudflare Turnstile)

8.2 Analytics Cookies

We use Cloudflare Web Analytics to understand how visitors use the Site. Cloudflare Analytics is privacy-first and does not track individual users across sites or use cookies for cross-site tracking. It collects:

• Page views and visit duration
• Referrer sources (where visitors come from)
• General device and browser information
• Approximate geographic location (country/region level)

This data is aggregated and does not identify you personally. Learn more about Cloudflare's privacy practices at cloudflare.com/privacypolicy.

8.3 Managing Cookies

Most browsers allow you to control cookies through their settings. However, disabling cookies may limit your ability to use certain features of the Site, particularly account-related features.

9. Children's Privacy

The Site is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately and we will delete it.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

When we transfer information internationally, we take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.

11. Third-Party Links

The Site may contain links to third-party websites, including healthcare organization websites and career pages. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information to them.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. If we make material changes, we will notify you by email or by posting a notice on the Site prior to the effective date of the changes.

Your continued use of the Site after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. If you do not agree to the revised Privacy Policy, you must stop using the Site and may delete your account.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected, the sources, purposes, and third parties with whom we share it.
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: You have the right to opt out of the "sale" of your personal information. We do not sell your personal information as that term is traditionally understood, but sharing your profile with potential employers when you apply may be considered a "share" under California law.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at support@mizu.health. We will verify your identity before processing your request.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Mizu Health
Email: support@mizu.health

We will respond to your inquiry within a reasonable timeframe.