This Privacy Policy describes how Grapevyne ("we", "us", or "our") collects, uses, and shares information about you when you use our website and services (collectively, the "Services"). By using our Services, you agree to the collection and use of your information in accordance with this Privacy Policy.

Information We Collect

• Personal Information: When you create a Grapevyne account, we collect your name, email address, National Provider Identifier (NPI), and bank account information for identity verification and commission payments.

• Candidate Information: When you submit candidate applications, we collect the candidate's name, contact information, and other details included in the job application.

• Usage Data: We may collect information about how you access and use the Services, including your IP address, browser type, operating system, and referring URLs.

How We Use Your Information

• To provide, maintain, and improve our Services.

• To process your commission payments.

• To help healthcare facilities fill open positions. 

• To communicate with you about your account and the Services.

• To prevent fraud and enforce our Terms of Service.

• To comply with legal obligations.

• We may deidentify certain data for our business purposes.  We will take reasonable measures to ensure that the deidentified data we possess cannot be associated with an individual and commit to maintaining and using deidentified data without attempting to reidentify it. 

Sharing Your Information

• We may share your information with third-party service providers who perform services on our behalf, such as payment processing and data analysis.

• If you submit a candidate recommendation, we will share the candidate's information with the hiring organization.

• We may share your information if required by law or in the good faith belief that such action is necessary to comply with legal processes, to protect our rights, or to prevent fraud or illegal activity.

• In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity.

• COOKIES, PIXELS, SESSION REPLAY, AND OTHER TRACKING TECHNOLOGIES (ADTECH)

  • We use cookies, pixels, session replay and other tracking technologies, including third-party tracking technologies (“AdTech”) on our Service. We use AdTech to collect and perform data analytics, to record how you interact with the Service and our Content, including where you direct your mouse, the information you type, and other user related activities and to serve you with targeted advertising. By visiting and using the Service, you are consenting to our use of AdTech and understand and agree that we may share Personal Information about you which we collect from the use of AdTech with our third-party advertising, session replay, and analytics partners. For more information about how we use AdTech, please see our Privacy Policy.

  • We collect, use, and share certain information and data when you use the Site, including certain Personal Information. 

Data Retention

We will retain your Personal Information for as long as your account is active or as needed to provide the Services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Security

We implement reasonable security measures to protect your information from unauthorized access, alteration, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.

Your Choices

• You may update your account information or deactivate your account at any time.

• You may opt-out of receiving promotional emails from us by following the instructions in those emails.

Children's Privacy

The Services are not intended for use by children under the age of 13. We do not knowingly collect Personal Information from children under 13.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on our website prior to the effective date of the changes.

Shine the Light

Pursuant to California Civil Code Section 1798.83, if you are a California resident, you have the right to obtain: (a) a list of all third parties to whom we may have disclosed your Personal Data within the past year for direct marketing purposes, and (b) a description of the categories of Personal Data disclosed by contacting us per the “Contact Us” Section below.

The capitalized terms in the following sections have the meanings given to them in the CA or TX consumer rights statutes.  

California residents have the right to opt-out of the Sale or Sharing of their Personal Information. You may authorize another person to submit requests to exercise this right on your behalf.

If you are a California resident, you may opt out of the Sale or Sharing of your Personal Information by: 

• Clicking on this link and completing the form; or

• Emailing us at hello@grapevyne.health

You must provide sufficient information to allow us to reasonably verify you are the person about whom we collected Personal Information, and you must describe your request with sufficient detail to allow us to properly understand, evaluate, and respond to your request.

If you choose to use an Authorized Agent, you must provide signed, written permission that authorizes the Agent to submit requests on your behalf and either (a) verify your identity directly with us, or (b) directly confirm with us that you granted permission to the Authorized Agent to submit the request on your behalf. For clarity, you are required to verify the identity of both you and the Authorized Agent. We may deny a request from an Authorized Agent if we do not have proof that they are authorized by you to act on your behalf.

Texas-Specific Rights

Right to Opt-Out of Certain Processing of your Personal Information

Texas residents may opt out of the processing of their Personal Information for purposes of: i) targeted advertising, ii) the sale of their Personal Information, and iii) automated profiling of Personal Information, if that profiling could lead to certain legal outcomes, (i.e., the provision or denial of employment opportunities). 

You may use an Authorized Agent to opt out of the sale of your Personal Information and the processing of your Personal Information for the purposes of targeted advertising.

Exercising Your State Privacy Rights

Who May Exercise Your State Privacy Rights

You may make a request to exercise your state privacy rights. A parent or legal guardian may make a request on behalf of their child. 

California residents may authorize another person to submit requests to exercise their rights on their behalf (an "Authorized Agent”). 

Texas residents may use an Authorized Agent to opt out of the sale of their Personal Information and the processing of their Personal Information for the purposes of targeted advertising. 

Verifiable Consumer Requests

We will only use the Personal Information we collect during the verification process for the purpose of verifying your identity. If we are unable to verify your identity as required by applicable laws and regulations, we will decline to comply with your request and let you know why. 

Submitting Requests to Exercise Your Consumer Privacy Rights

You may exercise your privacy rights up to two (2) times per year at no charge to you. We have the right to charge a fee for subsequent requests or any request that is manifestly unfounded, excessive, or repetitive. 

To exercise your rights described in this Section, you may submit your request to us by contacting us at hello@grapevyne.health

We will acknowledge receipt of your request within 10 business days of receipt of your request. We will try to respond to your request within 45 days of the date of receipt of the request. If we cannot verify your request within that 45-day time period, we may deny your request or request additional time. If we require additional time, we may extend our response window by an additional 45 days, and we will inform you of the reason and extension period is necessary prior to the conclusion of the original 45-day response period. Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. We may charge a fee to process or respond to your request if it is excessive, repetitive, or manifestly unfounded.

Appeals Process for Texas Residents

If you are a Texas resident, you have the right to appeal a denied request to exercise your privacy rights. You must submit your request within 60 days of your receipt of our denial. You may submit your request to us by:

• Emailing us at You can email us at hello@grapevyne.health

We will respond to your appeal within 60 days of receiving your request. When we respond, we will include any action taken or not taken, including an explanation of the reason or reasons for the decision.

Contact Us

If you have any questions about this Privacy Policy, please contact us at hello@grapevyne.health