Privacy policy

Information we handle and why

• Account and professional information. Your email, account identifier, sign-in credentials, account type and details you provide, such as your name, professional bio, credentials, experience, city or state, work preferences and profile images, support authentication, your profile and account permissions.
• Job search and hiring. Search words, a location you enter and filters are sent with your search request. Saved jobs, alerts, applications, application status and uploaded résumé files support the hiring tools you choose to use. Submitting an application shares the application and its attached résumé with the applicable Company and authorized hiring participants.
• Messages and community content. We store messages, posts, replies, reviews and related account references to deliver those features. Reports can include the reported content, your explanation and a private evidence excerpt. Blocks, report decisions and moderation history support safety and administration.
• Company and verification information. Company representatives provide business, location, membership and verification information. Credential or employment checks can involve supporting documents and confirmation records. Clinician Confirmed surveys collect answers and optional comments to produce workplace feedback and published results when their publication requirements are met.
• Support, interest and contact requests. Forms can collect your name, email, optional phone number, selected interests, message and communication choices. Signed-in support requests also include your account reference, request category and the relevant page path so we can respond and investigate.
• Billing information. When you use enabled billing features, Stripe handles the payment or billing interaction. TrustlyABA stores related customer and subscription references, plan, invoice and payment-status information to administer Company access and billing. Do not send full payment-card details in messages or support requests.
• Request and security information. Hosting and authentication services receive network information such as IP addresses, request paths, device or browser headers and timing. Requests may include search terms. Account permissions, activity counters, changes and audit records support service operation, abuse prevention and troubleshooting.

Free-text fields and files contain the information you put in them. Keep passwords, sign-in codes, patient-identifying information and unrelated sensitive information out of public posts, reviews and support messages.

Visibility and sharing choices

Published Company information, jobs, public community content and eligible published reviews or survey results can be read by visitors. A public Talent profile requires public visibility and profile approval. Check the visibility controls before publishing information you do not want others to see.

Account résumés are stored privately. The website offers a separate public résumé-sharing choice. Anyone who receives an enabled public résumé link can open it. Turning sharing off prevents further access through that link; it cannot recall copies already downloaded. Uploading or restoring a résumé version resets its public sharing to private. An application uses its own résumé snapshot, so changing your current résumé does not replace a previously submitted application attachment.

Messages are available to their authorized participants and applicable TrustlyABA support or administration staff. Reports, block records and verification evidence are not public community posts. Authorized staff can handle information needed to operate the service, review a report, assess verification or resolve a support request.

Clinician Confirmed publishes eligible aggregate results and selected comments under its publication controls. An aggregate reporting window is not a promise that the underlying responses are deleted at the end of that window. Avoid identifying yourself or another person in a comment you intend for publication.

Services involved in these features

TrustlyABA uses Supabase for authentication, database records and file storage, and Vercel to host the website and server requests. Other services receive information when their corresponding features are enabled and used:

• Resend delivers configured emails, including invitations, notifications and support requests. A support email includes the submitted message and account contact information.
• Twilio delivers configured text messages and returns delivery information. Phone numbers, message content and consent choices are involved in those messaging features.
• Stripe provides enabled payment, subscription and billing-portal features, including its own hosted forms.
• Google Maps and Places supply website maps, places and location lookup. Loading a Google map connects your browser to Google. Opening directions from the app can open Apple Maps.
• Brave Search can help authorized staff discover public Company websites and business contact information. This information can be used in Company discovery and invitation tools.
• Optional connected tools include Canva for authorized design workflows and Finch for enabled employment-verification workflows. These tools apply to the relevant connected feature; they are not needed simply to read this policy.
• Public professional registries, such as NPPES, can be consulted during enabled credential checks using the professional identifiers provided for that check.

A third-party website, map, billing page or app that you open has its own privacy information and controls. A browser or device may keep copies of information that you download or share outside TrustlyABA.

Cookies and your device

Website cookies maintain sign-in sessions, remember the selected account when you use multiple accounts, support recovery and preserve appearance preferences. Browser settings let you remove or restrict cookies; doing so can sign you out or reset preferences. The native app stores session material in the device Keychain and uses the device file picker when you choose a résumé to upload.

Selecting a location in a profile or search sends the location you enter. The native app does not request GPS, contacts, microphone or HealthKit access for these features. Files you export through your device are controlled by the receiving app or storage location.

Stored records and deletion

Account information and feature records are stored to provide the account and its history. Signing out, deleting a local download or uninstalling the app does not delete your TrustlyABA account. Removing the current résumé from your profile does not erase retained résumé versions. Withdrawing an application changes its status and does not erase the application record.

You can start account deletion in the app from MyTrustly or on the website from Settings. Deletion requires confirmation and an account check. For eligible personal accounts, the workflow removes owned résumé and profile files, applications, saved jobs, alerts, reviews, connections and support records, removes account access and participation, and removes or anonymizes associated profile and assessment information.

Some accounts require support review before deletion can finish, including accounts with protected Company ownership or administration, financial obligations, or files whose ownership cannot be safely confirmed. Billing and audit records, referral records, messages already received by other participants, and copies exported by others are not all removed by the personal-account deletion workflow. Provider logs, backups and records held in other services are also outside that self-service workflow. Contact us about a specific record or deletion request rather than assuming all copies disappear immediately.

Check the result of a deletion request. If it cannot complete or reports that review is needed, contact Customer Support. We do not describe signing out or a pending request as completed deletion.

Your choices and requests

• Review or edit your account and sharing choices in Settings, and manage your résumé from MyTrustly.
• Use available report and block controls for unwanted contact or content. Blocking limits the relevant contact and visibility; it is not an account-deletion request or a guarantee that a report will result in content removal.
• Ask Customer Support to help with access, correction, deletion or communication choices. Describe the account or information involved and the change you are requesting. We may need to confirm that the request relates to your account before discussing private records.

Email Erika@trustlyaba.com without signing in, or use the signed-in privacy request form. For technical problems, see Support. Keep passwords and sign-in codes out of your request.

Updates

This page shows its last-updated date. Check it for changes to the information and controls described here, and contact us if you need clarification about a feature or your data.