Effective date: July 2026 · AssignMe LLC
This policy explains what information AssignMe LLC ("AssignMe", "we") collects, why we collect it, how we protect it, and the choices you have. We have deliberately built the service to collect as little as possible — and, by design, no patient information at all.
1. Information we collect
Account information. Your name, work email address, role, organization name, facility type, and a hashed password. If you request information through our website, we also receive what you submit in that form, including an optional phone number and message.
Board information. The units, rooms and areas you create, the names and roles of staff on your roster, and which staff member is assigned where during a shift, along with shift notes your team writes.
Technical and security information. Sign-in events, IP address, browser and device type, and audit records of changes made in your account. These are used to keep the service secure and to troubleshoot problems.
Billing information. Subscription status, plan, and billing history. Card details are collected and stored by our payment processor — we never see or store full card numbers.
Usage information. Aggregate, first-party counts such as page views and feature usage, used to understand what to improve.
What we do NOT collect. No patient names, medical record numbers, diagnoses, treatments, medications or any other clinical information. The service has no fields for it and actively rejects submissions that appear to contain it.
2. How we use information
To provide and operate the service; to authenticate you and send two-step verification codes; to process subscriptions and send receipts; to respond to support and information requests; to send essential service notices such as trial expiry or payment failure; to detect, investigate and prevent fraud, abuse and security incidents; and to meet legal obligations. We do not sell personal information, and we do not use your data for third-party advertising.
3. Legal bases (where applicable)
Where the GDPR, UK GDPR or similar law applies, we rely on: performance of a contract (providing the service you signed up for), legitimate interests (securing the service, preventing abuse, improving the product), consent (optional communications, where required), and legal obligation (records we must keep).
4. Marketing and advertising technologies
Our public marketing pages use measurement tags from advertising platforms to understand which campaigns bring people to us. These operate only on our public website — they are deliberately not loaded inside the assignment tool or the administrative console, so your board activity is never shared with advertising platforms. You can block these with standard browser or extension controls without affecting your ability to use the service.
5. Cookies and local storage
We use a small number of strictly necessary cookies to keep you signed in and to protect against cross-site request forgery. We also store simple preferences (such as your light/dark theme and last-opened board) locally in your browser; these never leave your device. See our Cookies notice for detail.
6. How we share information
We share data only with the processors required to run the service: our cloud hosting provider; our payment processor (which handles card details directly); and our email delivery provider, used for verification codes, receipts and notifications. Each is contractually limited to processing data solely to provide its service to us. We may disclose information if required by law, to enforce our Terms, or to protect the rights and safety of users. If we are ever involved in a merger or acquisition, we will give notice before your information becomes subject to a different policy.
7. International transfers
We operate from the United States and our providers may process data there. Where information is transferred from other regions, we rely on appropriate safeguards, such as standard contractual clauses, as required by applicable law.
8. Security
Account and board data are encrypted at rest with AES-256-GCM and in transit with TLS. Passwords are stored as salted scrypt hashes and cannot be recovered in plain text. Sign-ins can be protected with emailed one-time codes, sessions use signed HttpOnly cookies, access is separated by organization and role, and administrative access is restricted to a named allow-list. Encrypted backups run on a rotating schedule. See our Security Overview for the full description.
9. Retention and deletion
We retain account and board data while your account is active. When a subscription lapses, or when you close your account, your data is retained so that returning with the same email restores your boards and subscription status — this prevents lost work and duplicate charges. If you prefer complete removal, choose Permanently erase all data in Account settings, or request it through Customer Support: this deletes your account, boards, history and any retained records with no recovery. We honour verified erasure requests promptly, except minimal records we must keep by law, such as payment records. You may export your data at any time.
10. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your personal data, to receive a portable copy, and to withdraw consent. Residents of California and similar jurisdictions have the right to know what is collected, to request deletion, and not to be discriminated against for exercising those rights — note that we do not sell personal information. To exercise any right, contact us through the Customer Support link; we may need to verify your identity, and we respond within the timeframe required by law.
11. Children
The service is intended for use by healthcare professionals in a workplace setting and is not directed to children. We do not knowingly collect information from anyone under 18.
12. Changes to this policy
We will update this policy as the service evolves and will note the effective date above. Material changes will be communicated by email or an in-service notice before they take effect.
13. Contact
For privacy questions or requests, use the Customer Support link in the footer of our website. We are AssignMe LLC, and we respond to every privacy request we receive.