Privacy policy

The short version

We collect user data. Dental Gigs is a staffing marketplace: to match dental offices with dental professionals we collect identity, licensing, location, messaging, and payment data, described in full below. We share it with the service providers that run the platform, never sell it, and you can delete your account yourself from inside the app.

Dental Gigs handles staffing data, not patient care. We never collect or store patient records.

What we collect

Account. Phone number, email address, your name, and a password (stored only as a salted hash) for office accounts. Professionals can use SMS codes, Google, or Apple sign-in where available. Google provides your name, email address, and account identifier. Apple provides an email address (which may be a private relay address) and account identifier. We use these identifiers to recognize your account. Apple authorization tokens are stored encrypted so we can check access and revoke authorization when you close your account. We do not receive your Google or Apple password or request access to Gmail, Drive, or Calendar.

Professional profile and credentials. Your role, license number, licensing state, and expiration date; documents you upload such as license photos and malpractice insurance proof (these documents can themselves show your date of birth, home address, or signature); an optional profile photo; and self-declared details such as your asking rate, years of experience, software, specialties, and bio.

Location. For professionals: the coordinates your browser reports when you sign up (used to match you with nearby shifts) and, when you clock in or out of a shift, the GPS coordinates of that clock event, which we compare against the office's location. For offices: your practice address and its coordinates.

Activity on the platform. Shift posts, offers, claims, counters, and bookings; per-shift message threads between an office and its confirmed professional; reviews and ratings in both directions; reliability events such as late cancellations or no-shows; favorites and blocks; timesheets and disputes.

Payments. Amounts charged and paid out, and identifiers linking your account to Stripe. Card and bank details go directly to Stripe; we never see or store them.

Technical. Short-lived one-time login codes (stored hashed, expiring in minutes), an audit log of significant account actions, and error reports if something breaks.

Public registry data

To verify licenses we keep a copy of the State of Colorado's public dental licensee roster (published by the Department of Regulatory Agencies on the Colorado Information Marketplace). It lists name, license number, status, and renewal dates for Colorado dental licensees, including people who have never used Dental Gigs. It is public information, we use it only for credential verification, and we refresh it nightly from the state's dataset.

How we use it

• Matching shifts to nearby, qualified, available professionals.
• Verifying licenses before a professional can be booked.
• Sending booking offers, confirmations, and reminders by SMS and email.
• Computing worked time and moving money between offices and professionals.
• Confirming a clock-in happened near the office (each event is flagged, not blocked, if it is far away).
• Keeping both sides accountable through reviews and reliability history.
• Fixing bugs and investigating misuse.

Automated decisions and AI

Dental Gigs uses no generative AI and has no AI chatbot. Two kinds of automation do affect your account, and we would rather you hear it from us:

• Matching is ranked by software. Which professionals see a shift first depends on distance, rate, availability, and reliability history. A human at the office still makes every booking decision.
• Repeated no-shows suspend automatically. Three late cancellations or no-shows within 60 days suspends a professional's account. Reinstatement is reviewed by a person; write to us if you believe a suspension was wrong.

License verification compares your submitted license against the state registry automatically, but a person reviews every credential before activation.

Who we share it with

We share data with third-party processors only to run the platform. We do not sell personal data and we do not share it for advertising.

• Stripe · payments, payouts, identity verification for payout accounts, and 1099 tax forms.
• Twilio · SMS delivery, including one-time login codes.
• SendGrid · email delivery.
• Google · optional account sign-in. When Google sign-in is available, its sign-in component connects your browser to Google and may use Google's cookies or browser identity features.
• Apple · optional account sign-in. When available, Apple's sign-in component connects your browser to Apple and may use Apple's cookies or browser identity features.
• Cloudflare · hosting for our web apps and private storage for credential documents.
• Railway · hosting for our servers and database.
• Sentry · error reporting when something crashes.
• OpenStreetMap · the map tiles in the shift map load from OpenStreetMap in your browser, and office address lookup queries OpenStreetMap's geocoder from your browser; both see your IP address.

Between users: offices see a professional's profile, credentials status (never the documents themselves), reviews, and approximate location; a professional's exact identity and an office's exact address are exchanged when a booking is confirmed. Map pins are blurred to roughly a 2 km grid until then.

We disclose data if the law requires it, and in a sale or merger the data goes with the service under this policy's protections.

Retention and deletion

You can close your account yourself: professionals under Profile, offices under Settings. Closing your account is immediate, free, and no harder than signing up was.

When you close your account we delete your uploaded documents and profile photo from storage, remove your license details and personal profile, and stop all messages. When you replace an uploaded document, the superseded file is deleted. Records of completed bookings, invoices, and payouts are kept as long as tax and accounting law requires, and messages you sent remain visible to the person you sent them to.

Security

All traffic is encrypted in transit. Passwords are stored as salted hashes. Credential documents live in a private storage bucket and are served only through short-lived signed links. Access to the review queue is restricted to Dental Gigs administrators.

Your choices

• View and edit your profile, rates, availability, and credentials in the app.
• Close your account in the app at any time.
• Ask us for a copy of your data, a correction, or deletion at support@dentalgigs.app. Colorado residents have these rights under the Colorado Privacy Act.
• SMS is how login codes and time-critical shift offers arrive; you cannot opt out of those and keep an active account. Marketing is a different matter: we do not send it.

Age

Dental Gigs is a work platform for adults. You must be 18 or older to use it, and we do not knowingly collect data from anyone younger.

Changes and contact

If this policy changes in a way that matters, we will tell you by email or SMS before the change takes effect. Questions, requests, complaints: support@dentalgigs.app, Dental Gigs, Inc., Denver, CO.