Privacy Policy

PUBLIC WEBSITE PRIVACY POLICY

SnapMedTech, Inc. dba SnapCare and connectRN, Inc.

Effective Date: November 02, 2026

Last Updated: October 28, 2026

SnapMedTech, Inc. d/b/a SnapCare (“SnapCare”) and connectRN, Inc. (“connectRN”) are affiliated companies under common ownership by MedStaff Technologies, Inc. (collectively, the “Companies,” “we,” “us,” or “our”).

We respect your privacy and are committed to protecting personal information. This Public Website Privacy Policy (“Public Privacy Policy”) explains how we collect, use, disclose, retain, and protect personal information when individuals visit our public websites, communicate with us about our services, or otherwise interact with us in a business or commercial capacity.

This Policy applies to:

• Visitors to www.snapcare.com and www.connectrn.com;

• Representatives of healthcare facilities and current or prospective customers;

• Vendors, business partners, and their representatives;

• Individuals who contact us for general information; and

• Other individuals interacting with the Companies in a business or commercial capacity.

Although SnapCare and connectRN operate under common ownership and provide similar healthcare staffing and workforce solutions, their information practices may not be identical. The categories of information collected, purposes of use, third-party recipients, and retention practices may differ depending on the Company, website, platform, or service involved. Where material differences exist, those practices are identified in this Policy.

Important Notice for Clinicians and Applicants

If you are a healthcare professional who applies for employment or assignments, creates a clinician account, submits credentialing information, uses a clinician-facing platform, or performs services through SnapCare or connectRN, additional privacy practices apply.

Please review our separate SnapCare and connectRN Clinician and Applicant Privacy Notice, which addresses employment, credentialing, background screening, occupational-health information, payroll, assignments, and other clinician-related information.

This Public Privacy Policy also applies to your interactions with the public portions of our websites. More specific notices provided during application, account creation, or onboarding supplement this Policy.

1. PERSONAL INFORMATION WE MAY COLLECT

The categories of personal information collected by SnapCare and connectRN may differ depending on the website, services, and nature of the interaction. The categories described below represent information collected by one or both Companies and should not be interpreted as indicating that each Company collects every category listed.

During the preceding twelve (12) months, the Companies have collected the following categories of personal information through their public websites and business interactions, as applicable.

A. Identifiers and Contact Information

• Name;

• Business or personal email address;

• Telephone number;

• Mailing address;

• Company or organization;

• Job title;

• Internet Protocol (IP) address;

• Device and cookie identifiers;

• Account or login information, where applicable; and

• Other information provided when contacting us.

B. Professional and Business Information

• Employer or organization;

• Job title and professional role;

• Staffing needs and business interests;

• Communications with the Companies;

• Information concerning existing or prospective commercial relationships; and

• Other professional information voluntarily provided.

C. Internet, Device, and Website Activity

We may collect:

• IP address;

• Browser and device type;

• Operating system;

• Device and advertising identifiers;

• Pages viewed and links selected;

• Search and navigation activity;

• Referring and exit pages;

• Dates and times of visits;

• Interactions with forms, advertisements, and website features;

• Cookie, pixel, and similar technology identifiers; and

• Other information concerning use of our websites.

D. General Geolocation Information

We may derive approximate geographic location from IP addresses or device information.

Our general public websites do not ordinarily require precise geolocation information. Location information collected through clinician-facing applications is addressed in the SnapCare and connectRN Clinician and Applicant Privacy Notice.

E. Communications and Inquiry Information

• Contents of inquiries;

• Emails and other correspondence;

• Information submitted through website forms;

• Customer-service communications;

• Survey responses; and

• Other information voluntarily provided.

F. Commercial Information

• Services in which an individual or organization has expressed interest;

• Existing or prospective customer relationships;

• Requests for proposals, demonstrations, or information;

• Website and marketing interactions; and

• Other commercial interactions with the Companies.

G. Inferences

We may derive inferences from website and commercial activity, including likely interests in particular staffing services, workforce solutions, or marketing content.

H. Sensitive Personal Information

Our public websites are not intended to collect Sensitive Personal Information (“SPI”), as defined under applicable privacy laws, from ordinary website visitors except where specifically requested for a legitimate business purpose. Please do not submit Social Security numbers, financial-account information, medical records, or other highly sensitive information through general website inquiry forms.

Certain SPI may be collected through our clinician application, credentialing, employment, and staffing processes, as described in our separate SnapCare and connectRN Clinician and Applicant Privacy Notice.

2. SOURCES OF PERSONAL INFORMATION

We may collect personal information:

• Directly from you;

• Automatically through our websites;

• From your employer or organization;

• From business partners and referral sources;

• From advertising and analytics providers;

• From social-media platforms;

• From publicly available professional or business sources;

• From our affiliated companies; and

• From other sources permitted by law.

The particular sources may differ depending on whether you interact with SnapCare or connectRN.

3. HOW WE USE PERSONAL INFORMATION

We may use personal information to:

• Operate, maintain, and secure our websites;

• Respond to inquiries and requests;

• Provide information about our services;

• Develop and manage customer and business relationships;

• Provide healthcare staffing and workforce solutions;

• Communicate with current and prospective customers;

• Respond to requests for proposals and other commercial inquiries;

• Manage vendor and business-partner relationships;

• Authenticate users where applicable;

• Prevent fraud, abuse, and security incidents;

• Troubleshoot and improve our websites;

• Understand website usage and conduct analytics;

• Measure advertising and marketing effectiveness;

• Market our services and personalize marketing content;

• Coordinate business operations and services between SnapCare and connectRN;

• Comply with legal, regulatory, contractual, and audit obligations;

• Establish, exercise, or defend legal claims;

• Protect the rights, safety, and property of the Companies and others;

• Facilitate mergers, acquisitions, reorganizations, financings, and other corporate transactions; and

• Fulfill other purposes disclosed at the time of collection or otherwise permitted by law.

We seek to collect, use, and retain personal information only to the extent reasonably necessary and proportionate to the purposes for which it is processed.

4. COOKIES, PIXELS, ANALYTICS, AND ADVERTISING TECHNOLOGIES

You may manage applicable cookies and advertising preferences through the Cookie Preferences or Your Privacy Choices controls available on the relevant website. Additional information about the technologies we use is available in our Cookie Policy.

We share certain personal information, including online identifiers and internet or other electronic network activity, with the following categories of third parties for cross-context behavioral advertising and related marketing purposes:

• Advertising networks and advertising technology providers;

• Social media platforms; and

• Digital marketing and advertising measurement providers.

These disclosures may be used to deliver relevant advertising, measure advertising effectiveness, develop advertising audiences, and evaluate marketing campaigns. The particular third parties involved may differ between SnapCare and connectRN.

5. SALE, SHARING, AND TARGETED ADVERTISING

SnapCare and connectRN do not sell personal information in exchange for monetary payment. However, we use third-party advertising and analytics technologies that may involve the disclosure of certain personal information for cross-context behavioral advertising, which constitutes “sharing” under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”).

During the preceding twelve (12) months, the categories of personal information we have shared for these purposes include:

• Identifiers, such as IP addresses, cookie identifiers, device identifiers, and other online identifiers; and

• Internet or other electronic network activity, such as browsing activity, pages visited, links selected, and interactions with our websites.

We share this information with third parties, including advertising networks, social media platforms, and advertising and analytics providers, for purposes such as delivering relevant advertising, measuring advertising effectiveness, and improving our marketing activities.

The particular technologies and third parties involved may differ between SnapCare and connectRN.

Your Right to Opt Out

You have the right to opt out of the sale or sharing of your personal information, as those terms are defined under applicable privacy laws.

You may exercise this right at any time through the Your Privacy Choices link available on the applicable website.

6. GLOBAL PRIVACY CONTROL AND DO NOT TRACK

The Companies recognize and honor qualifying browser-based opt-out preference signals, including Global Privacy Control (“GPC”), as required by applicable law. When we receive a qualifying GPC signal, we treat it as a request to opt out of the sale or sharing of personal information associated with the browser or device transmitting the signal. No additional action is required to exercise an applicable GPC opt-out. Where required by applicable law, we apply qualifying opt-out preference signals to associated accounts in accordance with applicable requirements.

GPC is different from a traditional browser “Do Not Track” (“DNT”) setting. Because there is no universally accepted standard governing traditional DNT signals, we do not necessarily respond to those signals unless required by law. Our treatment of traditional DNT signals does not affect our obligation to honor GPC or other legally recognized opt-out preference signals.

7. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to the following categories of recipients where reasonably necessary for legitimate business purposes or otherwise permitted by law.

A. Summary of Personal Information and Recipient Categories

Disclosure Table for CCPA Purposes

B. Customers and Business Partners

We may disclose information reasonably necessary to provide staffing and workforce services, respond to business inquiries, and administer existing or prospective commercial relationships.

C. Affiliated Companies

SnapCare and connectRN are affiliated companies under common ownership.

The Companies may disclose personal information to one another and to their parent company, MedStaff Technologies, Inc., where reasonably necessary for legitimate business purposes, including:

• Coordinating business operations;

• Managing customer relationships;

• Providing integrated or complementary services;

• Maintaining and improving technology systems;

• Administering shared business functions;

• Supporting information security and compliance; and

• Facilitating operational integration.

Information shared among affiliated companies remains subject to applicable privacy, confidentiality, security, and other legal requirements.

E. Professional Advisors

Including attorneys, accountants, auditors, consultants, insurers, and financial advisors.

F. Government and Legal Recipients

We may disclose personal information where required or permitted by law, subpoena, court order, governmental request, regulatory obligation, or where necessary to establish, exercise, or defend legal rights.

G. Corporate Transactions

Personal information may be disclosed in connection with an actual or contemplated merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or similar transaction.

H. At Your Direction or With Your Consent

We may disclose personal information when you direct or authorize us to do so or otherwise provide consent. The specific categories of information disclosed and recipients may differ between SnapCare and connectRN depending on the website, services, and nature of the interaction.

8. DATA RETENTION

The Companies retain personal information only for as long as reasonably necessary and proportionate to the purposes for which it was collected, unless a longer period is required or permitted by law.

Retention periods may differ between SnapCare and connectRN depending on their respective systems, business processes, contractual requirements, and applicable legal obligations.

The following general retention periods apply, unless a longer or shorter period is required by applicable law or necessary to preserve records relating to a claim, investigation, audit, or other legal obligation:

Certain records, including Form I-9 documentation and OSHA-covered medical or exposure records, are subject to specialized retention requirements. When information is no longer required for an authorized purpose, we take appropriate steps to delete, deidentify, or otherwise dispose of it in accordance with applicable law and our retention policies.

9. INFORMATION SECURITY

The Companies maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, destruction, or loss.

Depending on the information and systems involved, these safeguards may include access controls, authentication, encryption, security monitoring, employee confidentiality obligations, vendor security requirements, and incident-response procedures.

We seek to limit third-party access to personal information to what is reasonably necessary for authorized business purposes.

No security system can guarantee absolute protection, and the Companies cannot guarantee that unauthorized access, use, or disclosure will never occur.

10. CALIFORNIA PRIVACY RIGHTS

Depending on your state of residence and applicable law, you may have certain rights regarding your personal information. The following describes rights available to California residents under the CCPA. Residents of other states may have similar or additional rights, as described in Section 11.

A. Right to Know and Access

You may request information concerning personal information collected about you, including:

• Categories of personal information;

• Categories of sources;

• Business or commercial purposes for collection, use, sale, or sharing;

• Categories of third parties to whom information is disclosed;

• Categories of information sold or shared;

• Categories disclosed for business purposes; and

• Specific pieces of personal information, subject to applicable restrictions.

B. Right to Delete

You may request deletion of personal information collected from you, subject to applicable exceptions.

C. Right to Correct

You may request correction of inaccurate personal information maintained about you.

D. Right to Opt Out of Sale or Sharing

You may direct the Companies not to sell or share your personal information as those terms are defined by California law.

You may exercise this right through the applicable website's Your Privacy Choices control or a qualifying GPC signal.

E. Right to Limit Use or Disclosure of Sensitive Personal Information

To the extent either Company uses or discloses SPI for purposes subject to the right to limit under the CCPA, you may exercise that right through the applicable privacy-request mechanism.

Certain uses of sensitive personal information necessary to provide requested services, maintain security, comply with law, or perform other permitted activities may not be subject to this limitation right.

F. Right to Non-Discrimination and Non-Retaliation

The Companies will not unlawfully discriminate or retaliate against you because you exercise a right provided by the CCPA.

We will not unlawfully deny goods or services, charge different prices or rates, provide a different level or quality of services, or otherwise treat you adversely because you exercise an applicable privacy right.

Where permitted by law, the Companies may offer financial incentives related to personal information, subject to applicable notice, consent, and withdrawal requirements.

G. Authorized Agents

You may designate an authorized agent to submit certain requests on your behalf. We may require reasonable verification of the agent's authority and your identity as permitted by law.

11. OTHER STATE PRIVACY RIGHTS

Residents of certain states other than California may have additional rights under applicable comprehensive privacy laws, including rights to access, correct, delete, or obtain copies of personal information; opt out of targeted advertising or qualifying sales; and appeal certain privacy-request decisions.

The availability and scope of these rights vary by jurisdiction and may be subject to exceptions for employment, healthcare, business-to-business, or other information. The Companies will process requests in accordance with applicable law.

12. HOW TO EXERCISE YOUR PRIVACY RIGHTS

You may submit applicable privacy requests through:

Mail:

SnapMedTech, Inc. d/b/a SnapCare

connectRN, Inc.

Attn: Privacy

999 Peachtree Street NE

Suite 400

Atlanta, Georgia 30309

Online Privacy Request Form: https://link.snapcare.com/online-privacy-request-form

Privacy Email: privacy@snapcare.com

Toll-Free Telephone: (617) 944-1515

When submitting a request, please identify whether it relates to SnapCare, connectRN, or both, if known.

The Companies may use a shared privacy-request administration process. Requests will be evaluated and fulfilled by or on behalf of the applicable Company or Companies in accordance with their legal obligations.

We may request information reasonably necessary to verify your identity or authority to make a request.

We will respond within the periods required by applicable law.

13. MARKETING COMMUNICATIONS

You may unsubscribe from promotional emails through the unsubscribe mechanism included in the communication.

You may opt out of marketing text messages by following the instructions provided in the applicable message.

Even if you opt out of promotional communications, the Companies may continue to send non-promotional communications relating to existing business relationships, transactions, security matters, or other service-related purposes.

14. THIRD-PARTY WEBSITES AND SERVICES

Our websites may contain links to websites, platforms, or services operated by third parties.

The Companies are not responsible for the independent privacy practices of third parties. We encourage you to review their privacy policies before providing personal information.

15. CHANGES TO THIS PRIVACY POLICY

We may update this Policy from time to time to reflect changes in our information practices, technologies, services, business operations, or legal obligations.

The “Last Updated” date identifies the most recent revision.

Where required by law, we will provide additional notice regarding material changes.

16. CONTACT INFORMATION

For questions about this Policy or our privacy practices, please contact us using the information provided in Section 12.