Privacy Policy

1. Introduction

RepWallet, Inc. ("RepWallet", "we", "our", or "us") respects your privacy. This Privacy Policy describes the types of information we collect from and about you when you visit our website, use our mobile and web applications, or interact with our services (collectively, the "Services"), and how we use, share, and safeguard that information.

By using the Services, you agree to the collection and use of information in accordance with this Policy.

2. Information We Collect

We collect information you provide directly to us, information we collect automatically when you use the Services, and information from third parties.

• Account information: name, email, phone number, employer, role, and credential identifiers.
• Credential and access data: licenses, vaccinations, training certifications, and hospital access records you upload or that flow through integrations you authorize.
• Usage data: pages viewed, features used, device identifiers, IP address, and approximate location.
• Communications: messages you send to us or through the Services, including support inquiries and feedback.

3. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Services.
• Authenticate users and secure accounts.
• Sync credentials with hospital credentialing systems you connect.
• Send service notifications, expiration reminders, and product updates.
• Improve the Services, develop new features, and conduct analytics.
• Comply with legal obligations and enforce our agreements.

4. How We Share Information

We do not sell your personal information. We share information only as described below:

• With your employer or organization if you use RepWallet on their behalf.
• With hospitals, credentialing systems, and integration partners you authorize.
• With service providers who perform services on our behalf under contractual confidentiality obligations.
• To comply with law, legal process, or government requests; to protect our rights, property, or safety; or in connection with a merger, acquisition, or sale of assets.

5. Data Security

RepWallet maintains administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, and disclosure. We encrypt data in transit and at rest, use passkey and biometric sign-in, and maintain an append-only audit log. SOC 2 Type II certification is on our roadmap. We will execute a Business Associate Agreement (BAA) with any customer that requires one under HIPAA.

6. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your information at any time, subject to legal retention requirements.

7. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal information, and to object to certain processing. You can exercise these rights by contacting us at privacy@repwallet.com.

8. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

9. International Users

The Services are operated in the United States. If you access the Services from outside the U.S., you consent to the transfer and processing of your information in the United States.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated Policy on this page and update the "Last updated" date. Material changes will be communicated to account holders by email or in-product notice.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at privacy@repwallet.com or by mail at RepWallet, Inc., Attn: Privacy, San Antonio, TX.