Privacy Policy

SCHDL, Inc. ("SCHDL," "we," "our," or "us") operates the SCHDL Coverage Wizard and associated services available at schdlai.com (collectively, the "Service"). This Privacy Policy explains how we collect, use, store, and protect information when you use our Service.

By accessing or using the Service, you agree to the collection and use of information in accordance with this Policy. If you do not agree, do not use the Service.

SCHDL, Inc. is a Delaware corporation that provides agentic AI-powered scheduling coordination tools for healthcare facilities, hospitals, and health systems operating in the United States.

The Service is designed exclusively for use by healthcare workforce professionals including employees, supervisors, and administrators of healthcare organizations. It is not intended for use by the general public or by individuals under the age of 18.

3.1 Information You Provide

When you or your organization registers for and uses the Service, we collect the following operational scheduling data:

• Full name
• Work email address
• Phone number (for shift coordination and coverage notifications)
• Department or unit affiliation
• Shift times, dates, and scheduling preferences
• Role within your organization (Employee, Supervisor, or Administrator)
• Messages and requests entered into the Coverage Wizard

3.2 No Protected Health Information (PHI)

The Service is designed exclusively to handle operational scheduling and coverage coordination data. We do not collect, process, store, or transmit Protected Health Information (PHI) as defined under the Health Insurance Portability and Accountability Act (HIPAA). The Service does not access patient records, clinical data, medical histories, diagnoses, or any patient-identifiable information.

3.3 Information Collected Automatically

When you use the Service, we may automatically collect certain technical data including:

• Browser type and version
• Operating system
• IP address (used for security purposes, not retained long-term)
• Session identifiers
• Pages visited and features used within the Service
• Timestamps of interactions

This data is used solely to maintain and improve the Service and is not used for advertising purposes.

3.4 Information from Your Organization

If your healthcare organization has entered into a contract with SCHDL, certain scheduling and staffing data may be imported or synchronized through integrations with systems such as Epic, Kronos, or Workday. In such cases, your organization is responsible for ensuring it has appropriate authorization to share that data with us.

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Service
• To personalize your experience (e.g., greeting you by name within the Coverage Wizard)
• To send shift coverage notifications, confirmations, and coordination alerts
• To identify qualified, available staff for open shift coverage
• To track and document shift coverage events for operational and compliance purposes
• To improve and develop the Service based on usage patterns
• To respond to your inquiries and provide customer support
• To comply with legal obligations

We do not use your information for advertising, marketing to third parties, or sale to data brokers.

5.1 We Do Not Sell Your Data

SCHDL does not sell, rent, or trade your personal information or operational data to any third party for commercial purposes.

5.2 Service Providers

We may share data with trusted third-party service providers who assist us in operating the Service, subject to confidentiality agreements. These include:

• Cloud hosting and infrastructure providers
• Communication services (SMS, push notification delivery)
• Analytics tools used to improve the Service
• Payment processors (future integration via Stripe, Inc.)

5.3 Your Organization

If you use the Service through your employer or healthcare organization, your organization may have access to your usage data and scheduling activity within the Service as part of their administrative functions.

5.4 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal process, including subpoenas, court orders, or government requests. We will notify you of such requests where legally permissible.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of SCHDL's assets, your information may be transferred as part of that transaction. You will be notified via email or a prominent notice on our website prior to such a transfer.

We implement industry-standard technical and organizational measures to protect your information, including:

• Encryption in transit using TLS (Transport Layer Security)
• Encryption at rest for stored data
• Access controls limiting data access to authorized personnel only
• Session management and authentication controls
• SOC 2 compliance program in progress

While we take data security seriously, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and disclaim liability for breaches outside our reasonable control.

We retain your operational scheduling data for as long as your account is active or as needed to provide the Service. Upon account termination:

• Active scheduling and shift data is retained for 90 days following termination to allow for audit and compliance purposes
• After 90 days, identifiable data is deleted or anonymized
• We may retain aggregated, anonymized data indefinitely for product improvement purposes

You may have the following rights regarding your personal information:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data, subject to legal retention requirements
• Portability: Request your data in a machine-readable format
• Objection: Object to certain processing activities

To exercise any of these rights, contact us at privacy@schdlai.com. We will respond within 30 days. Identity verification may be required before processing your request.

We use essential cookies and session tokens to operate the Service. These are required for authentication and core functionality. We do not use advertising cookies or cross-site tracking.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, contact us immediately at privacy@schdlai.com and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will revise the Effective Date above and, for material changes, notify users via email or a notice within the Service at least 14 days before the change takes effect. Continued use of the Service after the effective date constitutes acceptance of the updated Policy.

For privacy-related inquiries, requests, or concerns:

SCHDL, Inc. — Privacy

Email: privacy@schdlai.com

Security: security@schdlai.com

General: hello@schdl.com

Website: schdlai.com

SCHDL, Inc. is incorporated in the State of Delaware. Registered agent information is available upon written request.