Welcome to Opportunity Theatre ("we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application (the "Service").
Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.
1. Information We Collect
We collect personal information that you voluntarily provide to us when you register on the Service, express an interest in obtaining information about us or our products and services, when you participate in activities on the Service, or otherwise when you contact us.
The personal information that we collect depends on the context of your interactions with us and the Service, the choices you make, and the products and features you use. The personal information we collect may include the following:
- Personal Identification Information: Name, email address, and professional role (e.g., Medical student, FY1, Consultant).
- Authentication Credentials: Passwords (hashed and managed by Firebase Authentication) and similar security information used for authentication and account access.
- Profile & Preference Information: Your preferred hospital, notification preferences (including preferred start and end times for notifications), and contact information sharing preferences (whether to share your email or phone number with users whose opportunities you accept, or with users who accept your opportunities). You may optionally provide a phone number.
- Opportunity Data: When you post an opportunity, we collect the procedure name, description, selected hospital, urgency level, minimum appropriate role, specific location details, deadline time, and an optional contact number. Your User ID and name are associated with these posts.
- Opportunity Interaction Data: When you accept an opportunity, your User ID and name are associated with that opportunity, along with the timestamp of acceptance.
- Report Data: If you report an opportunity, we collect your User ID, name, the reason for the report, the associated opportunity ID and its procedure name, and a timestamp.
- AI Feature Input Data: For features like Smart Notification Scheduling, we may collect data you provide, such as opportunity urgency and descriptions of user availability patterns. This information is processed by our AI models (e.g., via Genkit and Google AI) to provide suggestions.
Information Automatically Collected
When you use our Service, we may automatically collect certain information about your device and usage of the Service. This information may include:
- Log and Usage Data: Our servers automatically collect log and usage data when you access or use our Service and which we record in log files. This data may include IP address, browser type, operating system, referring/exit pages, and date/time stamps.
- Cookies and Similar Technologies: We use cookies and similar tracking technologies to access or store information. Specifically, we use Google AdSense, which uses cookies to serve personalized ads. You can find out more about how Google uses this information by visiting Google's Privacy & Terms site.
2. How We Use Your Information
We use personal information collected via our Service for a variety of business purposes described below:
- To provide and maintain our Service: Including to facilitate account creation and the logon process, manage user accounts, and operate the platform for posting, viewing, and accepting opportunities.
- To personalize your experience: Such as showing opportunities from your preferred hospital.
- To manage user interactions: Facilitating the connection between opportunity posters and acceptors, including sharing contact details based on your explicit consent and preferences.
- To enable AI-powered features: Such as using your input to suggest optimal notification times.
- To communicate with you: To send you administrative information, and to respond to your inquiries and support requests. If you enable notifications, we will send you email notifications about new opportunities based on your preferences.
- For administrative and moderation purposes: Including reviewing reported opportunities, managing user reports, and ensuring compliance with our guidelines.
- To show personalized advertisements: Through Google AdSense, to support the Service.
- To improve our Service: We may use your information to understand usage trends and improve the functionality and user experience of our Service.
- For security purposes: To help maintain the safety, security, and integrity of our Service.
- To comply with legal obligations.
3. How We Share Your Information
We may share your information in the following situations:
- With Other Users:
- When you post an opportunity, your name (or display name) will be visible to other users viewing the opportunity.
- When you accept an opportunity, your name (or display name) will be visible to the opportunity poster.
- If you have explicitly consented through your privacy settings, your email address and/or phone number may be shared with an opportunity poster when you accept their opportunity.
- If you have explicitly consented through your privacy settings, your email address and/or phone number may be shared with a user who accepts an opportunity you posted.
- With Service Providers: We share your information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. Examples include:
- Firebase (Google): For user authentication, data storage (Firestore), and application hosting. Their privacy policy can be found at https://policies.google.com/privacy.
- Google AI (via Genkit): For processing data related to AI features like smart notification scheduling. Usage is subject to Google's AI terms and privacy policies.
- Google AdSense: For serving advertisements. Their use of data is described in Google's Privacy Policy and their partner sites policy mentioned above.
- With Administrators: Users designated as administrators of the Opportunity Theatre platform will have access to user information, opportunity data, and report data for the purpose of managing and moderating the Service.
- For Legal Reasons: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.
- To Protect Rights and Property: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.
- Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
4. Data Storage and Security
Your information is stored on servers provided by Google Firebase, located in various regions globally. We and Firebase implement security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.
5. Your Data Rights
Depending on your location, you may have certain rights regarding your personal information under applicable data protection laws. These may include the right to:
- Request access to and obtain a copy of your personal information.
- Request rectification or erasure of your personal information.
- Restrict the processing of your personal information.
- If applicable, to data portability.
- Object to the processing of your personal information.
You can review and change your account information, including your name, role, phone number, and preferences (hospital, notifications, contact sharing) at any time by logging into your account settings.
If you wish to exercise any of these rights, or if you would like to terminate your account, please contact us using the contact information provided below. We will respond to your request in accordance with applicable data protection laws.
6. Third-Party Services and Links
The Service may contain links to third-party websites and applications of interest, including advertisements and external services, that are not affiliated with us. Once you have used these links to leave the Service, any information you provide to these third parties is not covered by this Privacy Policy, and we cannot guarantee the safety and privacy of your information. We are not responsible for the content or privacy and security practices and policies of any third parties, including other websites, services or applications that may be linked to or from the Service.
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. As mentioned, Google AdSense, a third-party service we use, utilizes cookies to serve ads based on a user's prior visits to our Service or other websites. Google's use of advertising cookies enables it and its partners to serve ads to your users based on their visit to your sites and/or other sites on the Internet.
Users may opt out of personalized advertising by visiting Ads Settings. Alternatively, you can opt out of a third-party vendor's use of cookies for personalized advertising by visiting www.aboutads.info/choices.
8. Data Retention
We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). Generally, this means we will keep your personal information for as long as you maintain an account with us.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
9. International Data Transfers
Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. Our primary service provider, Google Firebase, operates globally.
10. Children's Privacy
Our Service is not intended for use by children under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without verification of parental consent, we take steps to remove that information from our servers.
11. Changes to This Privacy Policy
We may update this privacy policy from time to time. The updated version will be indicated by an updated "Last updated" date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.
12. Contact Us
If you have questions or comments about this Privacy Policy, or if you wish to exercise your data rights, please contact us at: