Privacy Policy

1. Introduction

RenewRN ("we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use and protect it, who we share it with, and your rights regarding your data when you use the RenewRN website and application located at renewrn.net (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. This Privacy Policy is incorporated into and subject to our Terms of Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account information: email address, full name, and password (passwords are cryptographically hashed and never stored in plain text)
• Professional license data: state of licensure, license type (RN, LPN, APRN, etc.), license number, and expiration dates
• Continuing education records: course names, CE providers, hours completed, completion dates, categories, and certificate URLs
• Career information: career goals and professional development preferences
• Issue reports: category and description of issues you report through the Service

2.2 Information Collected Automatically

• Authentication cookies: essential cookies required for login session management (no tracking or advertising cookies are used)
• Affiliate link clicks: when you click an affiliate or partner link within the Service, we record the provider name, destination URL, and timestamp associated with your account. This data is used to measure the effectiveness of partner recommendations and is never shared with third parties for advertising purposes.
• Server logs: our hosting provider (Vercel) automatically collects standard server logs including IP addresses, browser type, and request timestamps for security and operational purposes

2.3 Payment Information

If you subscribe to RenewRN Pro, payment information (credit card number, billing address) is collected and processed directly by Stripe, Inc. We do not receive, access, or store your full credit card number. We receive only a confirmation of payment, subscription status, and a Stripe customer identifier.

3. How We Use Your Information

We use your information for the following purposes:

• Provide the Service: display your license data, track CE hours, calculate renewal progress, and manage your account
• Send notifications: deliver renewal reminder emails and in-app notifications based on your license expiration dates
• Process payments: manage Pro subscription billing through Stripe
• Respond to reports: review and address issue reports you submit
• Measure partner recommendations: analyze affiliate link click data to evaluate the relevance and usefulness of partner resources we surface within the Service
• Improve the Service: analyze aggregated, anonymized usage data to identify bugs, improve features, and plan development
• Communicate with you: send transactional emails related to your account, subscription changes, or material updates to our Terms or Privacy Policy

We do not use your information for advertising, profiling, or automated decision-making.

4. How We Store and Protect Your Data

Your data is stored in a PostgreSQL database managed by Supabase, hosted on Amazon Web Services (AWS) infrastructure in the United States. We implement the following security measures:

• All data is encrypted in transit using TLS (HTTPS)
• Database storage is encrypted at rest using AES-256
• Passwords are hashed using bcrypt before storage
• Row-level security (RLS) policies ensure users can only access their own data
• API keys and secrets are stored as environment variables, never in source code

While we take reasonable measures to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

5. Third-Party Service Providers

We share the minimum necessary data with the following third-party service providers to operate the Service:

Each provider operates under their own privacy policy and data processing agreements. We do not authorize any provider to use your data for purposes other than providing their service to us.

6. Data Sharing and Disclosure

We do not sell, rent, trade, or otherwise share your personal data with third parties for marketing, advertising, or any commercial purpose unrelated to providing the Service.

We may disclose your information only in the following circumstances:

• Legal compliance: when required by law, subpoena, court order, or other legal process
• Safety and rights: when we believe disclosure is necessary to protect the safety, rights, or property of RenewRN, our users, or the public
• Business transfer: in connection with a merger, acquisition, or sale of all or a portion of our assets, in which case your data would remain subject to this Privacy Policy
• With your consent: when you explicitly authorize us to share specific data

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, all associated data is permanently removed from our database, with the following exceptions:

• Data already included in anonymized, aggregated datasets (which cannot be linked back to you)
• Data we are required to retain by law (e.g., billing records for tax purposes, typically retained for 7 years)
• Server logs retained by our hosting provider per their retention policies

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: request a copy of the personal data we hold about you
• Correction: update or correct inaccurate data through your account Settings page
• Deletion: delete your account and all associated data at any time from the Settings page
• Portability: request an export of your data in a machine-readable format (available to Pro subscribers; free-tier users may contact us)
• Opt out of communications: unsubscribe from reminder emails using the link provided in each email

To exercise any of these rights, contact us at privacy@renewrn.net. We will respond to verified requests within 30 days.

9. State-Specific Privacy Rights

California (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with additional rights:

• Right to Know: you may request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to Delete: you may request deletion of your personal information
• Right to Opt Out of Sale: we do not sell personal information. We have not sold personal information in the preceding 12 months.
• Right to Non-Discrimination: we will not discriminate against you for exercising your privacy rights

Texas (TDPSA)

If you are a Texas resident, the Texas Data Privacy and Security Act (TDPSA) provides you with rights to access, correct, delete, and obtain a portable copy of your personal data. You also have the right to opt out of the processing of personal data for targeted advertising, the sale of personal data, and profiling. We do not engage in any of these activities. To exercise your rights, contact us at privacy@renewrn.net.

Other States

Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, and others) may have similar rights. We will honor reasonable privacy requests from all users regardless of location. Contact us to exercise your rights.

10. Cookies and Tracking

We use only essential, first-party cookies required for authentication and session management. These cookies are necessary for the Service to function and cannot be disabled.

We do not use:

• Third-party tracking cookies
• Advertising or retargeting pixels
• Analytics tracking scripts (e.g., Google Analytics)
• Social media tracking widgets

11. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to promptly delete that information.

12. International Users

The Service is hosted in the United States and is intended for use by individuals located in the United States. If you access the Service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. If we make material changes, we will notify you by email at least 30 days before the changes take effect. The "Effective Date" at the top of this page indicates when the policy was last revised.

Your continued use of the Service after the effective date of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree, you should discontinue use of the Service and delete your account.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:

RenewRN
Email: privacy@renewrn.net

For general support inquiries: support@renewrn.net