Last Updated: June 9, 2026
1. Introduction and Scope
Rovaryn Digital Inc. ("Rovaryn," "we," "us," or "our") operates NursingWorkforce.com, including its application and store. We respect your privacy and are committed to protecting your personal data. This policy is the Rovaryn privacy policy as it applies to NursingWorkforce.com and is consistent across all Rovaryn properties (collectively, the "Services").
2. Two Kinds of Data: Account Data and Customer Data
There are two distinct types of data, governed differently — this matters, so we state it up front:
- Account and usage data — information about you as a visitor, prospective customer, or account holder (for example, your name, email, and how you interact with the site). This policy describes how we handle that data.
- Customer Data — the data, documents, and inputs you upload into the NursingWorkforce.com application to do your work. It is your data, not ours. We process it only to provide the Services, on your behalf and on your instructions, as set out in our Terms of Service and, where applicable, a Data Processing Agreement. The collection and use sections below describe account and usage data, not your Customer Data.
3. Information We Collect
Account and usage data we collect:
- Identification and billing: name, email address, billing address, and payment information when you register or purchase. Payment card details are handled by our payment provider and are not stored on our systems.
- Technical and usage data: IP address, browser type, operating system, and interaction metrics, collected to operate and secure the Services.
Product-specific data you provide to NursingWorkforce.com:
- Workforce records you enter or import, such as units, roles, headcount, and staffing levels.
- Turnover, retention, and scheduling metrics you track and analyze.
- Details of the nursing staff you manage, including their names and employment details. Any such personal data about your staff is Customer Data, processed on your behalf under our Terms of Service and Data Processing Agreement.
4. How We Use Your Information
- To provide, operate, secure, and maintain the Services.
- To process transactions and manage your subscriptions.
- To improve and develop functionality.
- To communicate with you, including support and account or service notices.
- To detect, prevent, and address fraud, security incidents, and technical issues.
- To comply with legal, accounting, and reporting obligations.
5. Our Legal Bases for Processing
Where the law requires a legal basis, we rely on one or more of: performance of our contract with you (to deliver the Services you signed up for); our legitimate interests in securing, operating, and improving the Services, balanced against your rights; compliance with a legal obligation; and your consent where consent is the appropriate basis. Where we rely on consent, you may withdraw it at any time.
6. Sub-Processors and Infrastructure
We rely on trusted providers to deliver the Services. They process data on our behalf under confidentiality and data-protection terms, and we share only what is needed to provide the Services. They currently include:
- Hosting and infrastructure: Vercel.
- Database and authentication: Supabase.
- Payments: Stripe.
- Transactional email: Resend.
- Error and performance monitoring: Sentry.
- Analytics and search performance: Google (Google Analytics and Google Search Console). Google Analytics uses cookies and processes usage data to help us understand site traffic; Google Search Console reports aggregate search-performance data about our site.
- Artificial intelligence (where applicable): where a NursingWorkforce.com feature is powered by a third-party AI provider (such as Anthropic or Google), data sent to that provider is governed by its enterprise terms, which prohibit using your data to train publicly available models.
7. Cookies and Similar Technologies
We use cookies and similar technologies as described in our Cookie Policy, which forms part of this policy.
8. Data Security
We apply commercially reasonable technical and organizational measures — including encryption in transit, access controls, and row-level isolation between customer organizations — to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Data Retention
We keep personal data only as long as necessary for the purposes in this policy. Account and Customer Data are retained for the duration of your subscription and for a limited period afterward, then deleted or anonymized, unless a longer period is required by law. As a Canadian business, we retain financial and transaction records for the period required by the Canada Revenue Agency (currently six years). You may request earlier deletion as described below.
10. Your Privacy Rights
Depending on where you live, you may have some or all of these rights over your personal data: access, correction, deletion, portability, restriction of or objection to processing, and withdrawal of consent. These rights arise under laws that may apply to you, including Canada's PIPEDA, Quebec's Law 25, U.S. state privacy laws such as the California Consumer Privacy Act (CCPA), and the EU/UK GDPR, and are subject to legal exceptions.
We do not sell your personal data, and we do not share it for cross-context behavioral advertising. Where the CCPA applies to a customer relationship, Rovaryn acts as a service provider for your account and Customer Data, processing it only for the purposes you engaged us for and not for any independent commercial purpose. We will not discriminate against you for exercising any privacy right.
U.S. state privacy rights. If you are a resident of a U.S. state with a comprehensive consumer-privacy law — including California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas, Oregon, Montana, and other states as their laws take effect — you may have the rights described above and, where the applicable law provides them, the rights to opt out of the sale of personal data, targeted advertising, and certain profiling, and to limit the use of sensitive personal information. We do not sell personal data, do not share or process it for targeted advertising, and do not use it for profiling that produces legal or similarly significant effects — so no opt-out is required; if that ever changes, we will provide the opt-out the law requires. California residents may also request the categories and specific pieces of personal information we have collected and our purposes for collecting them. Where your state's law provides an appeal process, you may appeal a denial of your request by emailing privacy@rovaryn.com, and if we deny the appeal you may contact your state attorney general. You may use an authorized agent to submit a request on your behalf, subject to verification.
To exercise a right, email privacy@rovaryn.com. We will respond within the timeframe required by applicable law (generally within 30 days) and may need to verify your identity first.
11. Children's Privacy
The Services are intended for business use by adults and are not directed to anyone under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
12. International Data Transfers
Rovaryn Digital Inc. is based in Ontario, Canada. Your information may be processed in Canada, the United States, or other jurisdictions where our sub-processors operate. Where required, we put appropriate safeguards (such as standard contractual clauses) in place for these transfers.
13. Data Breach Notification
If a breach of security safeguards creates a real risk of significant harm, we will notify affected individuals and the relevant authorities as required by applicable law, and we will keep records of breaches as the law requires.
14. Changes to This Policy
We may update this policy from time to time. We will post the updated version and revise the "Last Updated" date, and provide additional notice of material changes where required.
15. Contact Us
Rovaryn Digital Inc. Email: privacy@rovaryn.com Address: 901 Guelph Line, Suite #12008, Burlington, Ontario L7R 3N8, Canada