Legal

Privacy Policy

Effective date: June 11, 2026  ·  Last updated: June 11, 2026  ·  Questions? privacy@rcmjobs.com

1. What Data We Collect

Job Alert Subscribers

When you sign up for job alerts, we collect:

• Email address — required to deliver alerts
• Specialty preference — the RCM category you selected (e.g., Denial Management, Prior Authorization)
• Remote preference — whether you prefer remote-only roles
• Subscription date and confirmation status
• Source — how you found us (e.g., homepage, a specific job listing)

Candidate Profile (optional)

If you choose to create a candidate profile, we additionally collect:

• Full name
• City and state (optional; can be hidden from employers)
• Current employer (optional; can be hidden via confidential mode)
• Certifications (e.g., CPC, CCS, RHIT)
• EHR / systems experience (e.g., Epic, Cerner, athenahealth)
• Years of RCM experience
• Work preference (remote, hybrid, on-site, flexible)
• Minimum desired salary (optional)
• Job search status
• Leadership information (level, team size, budget, competencies) — optional, for director-level and above
• Resume file — PDF or Word document, optional (see Resume Storage)
• Consent record — date and time you agreed to share your profile with employers

Employer & Recruiter Inquiries

If you post a job or contact us about employer services, we collect your name, email address, company name, and any information you include in your message.

Automatically Collected Data

Like most websites, we automatically receive:

• IP address and approximate geographic region
• Browser type and version
• Referring URL
• Pages visited and time spent (via Google Analytics — see Cookies)

We do not use fingerprinting, pixel tracking on third-party sites, or any cross-site behavioral advertising.

2. How We Use Your Data

• Job alerts — we email you new RCM job listings matched to your specialty preference, typically every Tuesday. You can unsubscribe at any time using the link in any alert email.
• Candidate matching — your profile data may be surfaced to verified employers and recruiters when you have explicitly consented to sharing (the consent checkbox on the profile form). Without consent, your profile is never visible to third parties.
• Improving the site — aggregate, anonymized usage data helps us understand which categories are most popular, which pages have high bounce rates, and how to improve job matching.
• Transactional communications — login links, subscription confirmations, and account notices.
• Internal analytics — we track subscription growth, profile completion rates, and search activity in aggregate. This data is never sold or shared.

We will never use your data to send unsolicited marketing from third parties, sell advertising against your profile, or train third-party AI models.

3. Resume Storage

Uploaded resumes are stored in Supabase Storage (hosted on AWS, US region). Files are:

• Encrypted at rest using AES-256
• Encrypted in transit using TLS 1.2+
• Accessible only via authenticated API calls using your session token
• Stored under a path scoped to your account ID — no two accounts share a storage namespace

Your resume is never publicly accessible via a guessable URL. You retain full ownership of your resume. We store it solely to facilitate candidate matching and to display it back to you. You may delete it at any time by emailing privacy@rcmjobs.com.

4. Data Sharing & Third Parties

We share data only in these limited circumstances:

• With your explicit consent — if you complete a candidate profile and check the consent box, your profile (excluding hidden fields) may be shared with verified employers and recruiters who use our matching service. You can withdraw consent at any time by updating your profile.
• Service providers — we use the following infrastructure providers to operate the service. Each is contractually bound to handle your data securely and only for the purpose of providing services to us:
  • Supabase — database and file storage (US region)
  • Netlify — hosting and serverless functions
  • Resend — transactional email delivery (confirmations, login links)
  • Google Analytics — anonymized site analytics (see Cookies)
• Legal requirements — we may disclose data if required by applicable law, court order, or to protect the rights, property, or safety of RCMJobs, its users, or the public.
• Business transfers — if RCMJobs is acquired or merged, user data may transfer to the successor entity, subject to the same privacy protections described here. We will notify users via email before any such transfer.

5. Your Rights as a Candidate

You have the following rights with respect to your data:

• Access — you can request a copy of all personal data we hold about you.
• Correction — you can update your profile at any time by logging in at /profile/. For data not editable in the UI, email us.
• Deletion — you can request deletion of your account and all associated data, including your resume file. We will complete deletion within 30 days.
• Portability — you can request your data in a machine-readable format (JSON).
• Withdraw consent — you can withdraw your employer-sharing consent at any time by unchecking the consent box in your profile and saving.
• Unsubscribe — every job alert email contains a one-click unsubscribe link. You can also email us to unsubscribe.

To exercise any of these rights, email privacy@rcmjobs.com. We will respond within 30 days.

6. Cookies & Analytics

We use a minimal set of cookies:

• rcj_session — an HttpOnly session cookie that keeps you logged in to your candidate profile. It does not contain personally identifiable information — only a cryptographically signed token. This cookie is strictly necessary for the profile feature to function.
• Google Analytics (_ga, _gid) — these cookies allow us to measure aggregate site traffic, popular pages, and referral sources. We have IP anonymization enabled. Google Analytics data is processed by Google in accordance with Google's privacy policy. You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.

We do not use advertising cookies, third-party tracking pixels, or social media retargeting cookies of any kind.

7. Data Retention

• Job alert subscribers — we retain your email and preferences for as long as your subscription is active. If you unsubscribe, your data is deleted within 90 days.
• Candidate profiles — profiles are retained while your account is active. Inactive accounts (no login or activity for 24 consecutive months) are automatically deleted, along with all associated profile data and resume files. We will email you a 30-day notice before deletion.
• Employer inquiries — retained for up to 3 years for business records, then deleted.
• Analytics data — Google Analytics data is retained for 14 months per our account settings.
• Server logs — automatically purged after 30 days.

8. Security

We take reasonable technical and organizational measures to protect your data:

• All data in transit is encrypted using TLS 1.2 or higher.
• Database and file storage are encrypted at rest (AES-256 via Supabase/AWS).
• Session tokens are signed with HMAC-SHA256 and are single-use where applicable.
• Login links expire after 1 hour and are single-use.
• Service role keys and secrets are stored as environment variables and never exposed to the client.

No method of transmission over the internet is 100% secure. If you believe your account has been compromised, contact us immediately at privacy@rcmjobs.com.

9. Children's Privacy

RCMJobs is a professional employment platform intended for adults. We do not knowingly collect personal information from anyone under the age of 16. If you believe a minor has submitted personal data to us, please contact privacy@rcmjobs.com and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify active subscribers by email. Continued use of RCMJobs after changes are posted constitutes acceptance of the updated policy.

11. Contact Us