Privacy Policy
Version 1.3 · Last updated 2026-10-27
Skillport Inc., a Delaware corporation doing business as OpusRoster ("OpusRoster", "we", "us", "our"), operates the OpusRoster websites and mobile applications (together, the "Platform"). This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have.
It applies to everyone who uses the Platform: job seekers, independent licensed professionals ("RosterPros"), healthcare facilities and their staff, and recruiters.
1. In short#
- We collect what we need to run a shift marketplace and a job board: who you are, how to reach you, and — for people who work shifts — the credentials, tax and payment details that paid work requires.
- We do not sell your personal information, and we do not share it for advertising.
- We share it with the facility or business you are dealing with, and with the service providers who help us operate: payments, identity verification, email, text messages, sign-in, mapping, résumé reading, and hosting.
- You can ask us for a copy of your information, ask us to correct it, or ask us to delete it. Some records we must keep.
2. Information you give us#
Everyone who creates an account: your name, email address, phone number, password, and the account type you choose. If you sign in with Google or Apple, we receive your name and email address from them.
Job seekers: your profile details, résumé, cover letter, work history and anything else you choose to add, plus the content of applications you submit.
RosterPros: in addition to the above —
- your professional licences, certifications and registration numbers, and the documents evidencing them;
- health screening and clearance documents where a facility or the law requires them, such as immunisation records, tuberculosis test results and drug screening results;
- background check results;
- proof of professional liability insurance;
- tax information. You complete a Form W-9 through the Platform. The completed form, including your full taxpayer identification number (Social Security Number or Employer Identification Number), is held by us as an encrypted document in storage separated from the rest of the Platform, and is available only to the OpusRoster staff who need it. We do not keep your full taxpayer identification number anywhere else, and we never show it or the form to a facility or a recruiter.
- Your date of birth and identity details are collected by Stripe, not by us. Before you can be paid, Stripe — our payments provider — carries out the identity verification that financial regulation requires, on its own pages. Your date of birth, government identification number and bank account details go to Stripe directly. We do not store them; we keep only the identifier Stripe gives us for your account.
These screening and credential records contain sensitive personal information. We use and disclose them only for staffing eligibility, credentialing, facility requirements, security, legal compliance, and the related purposes described in this Policy. Access is limited to authorised OpusRoster personnel and to facilities with a relevant need, as described in section 6. We aim to collect only the documents and details reasonably needed for the relevant role or requirement.
Facilities and recruiters: your organisation's name, address and contact details, the details of the people you add to your account and the roles you give them, your rate cards and shift details, and your billing and payment details. Card and bank numbers go to Stripe; we keep an identifier and, on an invoice, the last four digits of a card.
3. Information we collect as you use the Platform#
- Location, for clocking in and out of a shift. When you clock in, the mobile application sends your device's location, and we compare it with the facility's work-site location to confirm you are there. Each facility decides whether this check applies to it and how far from the work site is acceptable. If the check applies and you are outside that distance, clock-in is refused and we tell you how far away you are. When you clock out, your location is recorded if your device provides it, but clocking out is never restricted by location — you can clock out from anywhere, which matters if you leave and clock out later. We do not collect your location at any other time, we do not collect it while the app is in the background, and we do not track your movements between shifts. If you refuse the operating system's location permission, you can still use the app, but you will not be able to clock in where a facility requires the check.
- Device and connection information, such as your IP address, browser or app version, device identifiers and the pages or screens you use.
- Records of what you do on the Platform: shifts posted, claimed, worked, approved or cancelled; documents uploaded and reviewed; timecards and corrections, including the reason given for a correction; messages sent through the Platform; and, when you accept an agreement, the date and time, your IP address and your browser or device.
- Cookies and similar storage. Our website sets cookies that are necessary to sign you in, keep your session secure, carry you through two-step verification, remember a device you have told us to trust, and remember preferences such as which table columns you have chosen. It also keeps unfinished sign-up and job-posting drafts in your browser so you do not lose them. We set no advertising cookies and no cross-site tracking cookies.
- Website analytics. On our public web pages — not inside your signed-in account — we use Plausible Analytics to count page views and understand which pages are used. Plausible is privacy-focused: it sets no cookie, does not follow you across websites, and does not build a profile of you.
- Third-party services loaded by our website. Our web pages load Google Maps and Google Fonts from Google, Stripe's payment library on payment pages, and our sign-in provider's library on the sign-in pages. These are necessary for those features, and your browser's request to them includes your IP address. Those companies handle that under their own privacy policies.
OpusRoster is a staffing and workforce coordination platform. It is not a replacement for a facility's electronic health record, clinical documentation system, or medication administration record, and it has no clinical charting or medication administration features. Unless a specific feature and a written agreement expressly provide otherwise, do not upload or enter patient or resident clinical information into OpusRoster. Facilities and RosterPros should use the clinical systems the facility designates for charting and medication-related documentation.
4. Information other people give us about you#
- A facility may record notes and a rating about a RosterPro who has worked for it. These may be used for staffing decisions, assignment management, quality review, and safety-related purposes.
- A facility may raise an objection ("flag") about a credential document, which we review to decide whether further information or verification is needed. A flag by one facility is never shown to another facility.
- Where we arrange a background check or screening, the provider sends us the result.
If you believe a note, rating, flag or credential status about you is materially inaccurate, email support@opusroster.com. We may ask for information in order to review it, and we keep a record of the review for security, legal compliance and dispute resolution.
5. Why we use your information#
- To create and operate your account, and to sign you in securely.
- To verify that a RosterPro is who they say they are and holds the credentials they claim, before they can work a shift.
- To read a résumé you upload, fill in your profile from it, and suggest skills.
- To match shifts and roles with the people who can fill them, and to let facilities and businesses review applicants.
- To record hours worked, calculate pay, invoice facilities and pay RosterPros.
- To meet our legal and tax obligations, including reporting payments as the law requires.
- To keep records of actions taken on the Platform, which we are required to do and which protect everyone in a dispute.
- To send service messages — verification codes by email or text message, shift and timecard notifications, payment notices, and messages about your account. These are operational messages, not marketing. If we ever send promotional messages, we will give you the consent and opt-out choices the law requires.
- To detect and prevent fraud, abuse and unauthorised access, and to keep the Platform secure.
- To improve the Platform and support you when you contact us.
Depending on the law that applies to you, we process information in order to provide the service and perform our agreements with you, to comply with legal obligations, and for legitimate business purposes such as security, fraud prevention, support and service improvement. Where a law requires consent or another specific basis, we will seek or rely on that basis.
6. Automated processing, and decisions made by people#
Some parts of the Platform work automatically:
- shifts and roles are ranked and filtered for you, including by distance from you, and we may email you matches;
- an applicant's fit for a posted role is scored by a formula, to help whoever is reading applications prioritise who to read first;
- your résumé is read by an artificial intelligence service to extract its content into your profile and to suggest skills;
- clocking in is allowed or refused by comparing your location with the facility's, as section 3 describes.
No decision about whether a RosterPro may work is made automatically. Credential verification — the decision that lets someone claim shifts at all — is made by OpusRoster staff reviewing the documents. A score or a ranking never decides whether you are hired, engaged or approved for a shift; a person at the facility or the business decides that. If an automated result about you looks wrong, email support@opusroster.com and a person will look at it.
7. What other users can see#
- A facility sees a RosterPro's profile, licence number and verification status. It sees their credential documents only once that RosterPro has applied for one of its shifts or worked for it, and only its owner and supervisor may open those documents. It never sees their email address, phone number or home address. Notes a facility writes are visible only to that facility, and one facility never sees another facility's notes, objections or requirements.
- A RosterPro sees the facility, the shift, the rate and every price movement on it, and the timecard with any correction and the reason for it.
- A business or recruiter sees what an applicant submits in their application, including uploaded documents and answers to screening questions.
- We never show a facility or a recruiter your Form W-9, your taxpayer identification number or your bank details.
8. Who we share information with#
We share personal information with:
- The facility, business or recruiter you are dealing with, as described in section 7.
- Stripe (payments and identity verification). Stripe handles facility payments and RosterPro payouts, and carries out the identity verification the law requires. Your date of birth, government identification number and bank or card numbers go to Stripe directly rather than to us.
- Anthropic (artificial intelligence). When you upload a résumé, the file is sent to Anthropic's service so that its content can be read and placed in your profile, and so that relevant skills can be suggested. Anthropic processes this for us and does not use it to train its models.
- Twilio (text messages), where we send a verification code by text message.
- Our sign-in provider (Google, through Firebase), which handles signing in with Google or Apple.
- Our email delivery provider, which sends the emails the Platform generates.
- Google (mapping, addresses and fonts), to turn an address into a location so clock-in can work, to find a facility's location, to suggest addresses as you type, and to serve the fonts and icons our pages use.
- Plausible (website analytics), for public web pages only, as described in section 3.
- Our cloud hosting and database providers, which store Platform data on servers in the United States. We use service providers under contractual or other safeguards appropriate to the service they provide and the information they handle.
- Background check and screening providers, where a check is arranged through us.
- Professional advisers — lawyers, accountants and auditors — where they need it to advise us.
- Authorities and others, where the law requires it, where we must enforce our terms, or where we reasonably believe it is necessary to prevent harm.
If our business is sold or merged, information may transfer with it. We will tell you if that happens.
We do not sell personal information, and we do not disclose it for anyone else's advertising.
9. How long we keep it#
We keep personal information for as long as reasonably necessary for the purposes in this Policy: to operate your account, administer bookings and payments, meet legal, tax and accounting obligations, resolve disputes, prevent fraud, and enforce our agreements. How long that is depends on the kind of information.
Records of shifts, hours, approvals, corrections, invoices and payments are kept for the periods tax and employment law require, and for as long as a dispute about them could arise. The record of actions taken on the Platform — who did what and when — is kept as our audit trail.
Be aware that our general approach today is to retain rather than delete, so that pay, tax and dispute records stay complete. If you want information removed, ask us, and we will remove what we are not required to keep.
Your completed Form W-9 is kept while you are paid through the Platform, and afterwards until the end of the fourth calendar year following your last payment, after which the document is removed automatically.
10. Your choices and rights#
Whatever state or country you are in, you may ask us to:
- give you a copy of the personal information we hold about you;
- correct it, if it is wrong;
- delete it, subject to the records we must keep;
- stop sending you messages that are not necessary to the service;
- tell you who we have shared it with.
Depending on where you live, you may also have the right to object to certain uses, to ask us to restrict them, to receive your information in a portable form, and not to be treated differently for exercising any of these rights. We will not discriminate against you for exercising them.
To exercise any of these, email support@opusroster.com from the address on your account, or use the account settings where they are offered. We will respond within the time the law allows, and we may need to confirm who you are first.
Because we do not sell personal information and do not use it for targeted advertising, there is nothing to opt out of in that respect.
11. Deleting your account#
You can ask for your account to be deleted from within the mobile app, from your account settings on the web where that is offered, or by emailing support@opusroster.com. We may need to confirm who you are first. When you do:
- your access ends immediately and your profile stops being shown to other users;
- we then remove your personal details and the files you uploaded — your name and email address are replaced, and your phone number, photo, password, résumé and credential documents are deleted;
- we keep the records of work performed, payments, invoices, agreements, and actions taken on the Platform, because tax law, employment law and dispute resolution require them;
- your Form W-9 is kept until the end of the fourth calendar year following your last payment, and is then removed automatically;
- where information is kept, access to it is limited to the purpose it is kept for.
Deleting your account does not cancel amounts owed to or by you, or shifts already accepted. You may ask us to delete the retained records once the periods the law requires have passed, and we will.
12. Security#
We protect personal information with encryption in transit, access controls that limit who inside OpusRoster can see what, private storage for credential documents that is not reachable from the public internet, and separate restricted storage for tax documents, which are encrypted. Passwords, sign-in codes and trusted-device tokens are stored only in hashed form, never as plain text. No system is perfectly secure. If a security incident requires it, we will notify affected people and the authorities as the law requires.
13. Children#
The Platform is for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, email support@opusroster.com and we will delete it.
14. Where your information is held#
We operate in the United States and serve users in the United States and Canada. Platform data is held on servers in the United States. If you use the Platform from outside the United States, your information is transferred to and processed there, and some of our service providers may process it in other countries where they operate. Where the law requires it, we use appropriate safeguards for those transfers.
15. Changes to this policy#
We may update this policy. We will post the new version with its date, and where the change is material we will tell account holders by email or in the Platform. Continuing to use the Platform after a change takes effect means you accept the updated policy.
16. Contact us#
Skillport Inc., doing business as OpusRoster 346 Whipple Road Tewksbury, MA 01876 United States
Skillport Inc. is a Delaware corporation.