Privacy Policy

MOLE ("MOLE," "we," "us") is a competitive intelligence product for healthcare staffing agencies operated by Good People Company. Our website is moleagent.ai. Questions about this policy go to bkowske@gogpc.com.

We collect four categories of data:

• Account data — your work email, hashed password, and the focus settings (states, specialties) you configure.
• Billing data — handled by Stripe. We see and store: Stripe customer ID, subscription ID, plan tier, status (active/trialing/canceling/past_due), trial end date. We never see or store your card number.
• Usage data — which opportunities you click, when you log in, and which intel you submit (e.g. MSP relationship reports). Used to improve product quality and surface relevant signals back to you.
• Facility contact data — business contact information (name, title, work email or phone, and professional profile links) for decision-makers at healthcare facilities, compiled from public sources and third-party professional data providers. This is the intel that Handler-tier plans and above surface; see Section 6. It is not candidate, clinician, or patient data.

We do not collect data about candidates, clinicians, or patients. All job-posting data is sourced from public-facing pages on agency websites and aggregator boards. We do not have a clinician-facing product, and we do not sell, broker, or store applicant resumes.

• Run the product (show you opportunity intel matched to your focus settings)
• Process payments via Stripe
• Send transactional emails (login confirmation, payment receipts, sweep alerts) — never marketing spam
• Improve scoring accuracy by tracking which opportunities reps engage with

We rely on the following processors to operate MOLE:

• Stripe — payment processing, subscription management, customer portal
• Supabase — primary database, authentication, file storage
• Vercel — application hosting and serverless functions
• Anthropic — AI classification of public job-posting text
• Apify — web-scraping infrastructure for public job postings
• Google Maps / Places — facility geocoding and enrichment
• Resend — transactional and notification email delivery

We also obtain the facility contact information described in Section 6 from public sources and third-party professional data providers, including Apollo, PracticeMatch, and PracticeLink.

We do not sell your account, billing, or usage data, share it with advertisers, or feed it into third-party analytics outside of internal product telemetry.

Job postings displayed in MOLE are aggregated from public-facing pages on agency websites and job boards. We attribute each posting to its originating source and link back to the agency's URL where the posting appears.

We honor exclusion and removal requests and rate-limit our crawlers to avoid burdening any site. If you operate an agency or board and want your postings excluded, email bkowske@gogpc.com and we'll remove your domain from our crawl roster.

Higher-tier plans (Handler and above) surface business contact information for decision-makers at healthcare facilities — name, title, and work phone or email — so reps can reach the right person about an opportunity. This is business and professional contact information, compiled from publicly available sources and third-party professional data providers. It is the subject matter of the intel we provide and is separate from the account information you give us.

We do not collect or display personal, non-work contact details, and we do not provide bulk export of this information — it is shown in context inside the product, not sold as a downloadable contact list. A facility contact who wants their information removed can email bkowske@gogpc.com and we'll remove it.

• Account data: kept for the life of your account; deleted within 30 days of account closure
• Billing records: retained 7 years to comply with US tax law
• Job postings: kept indefinitely as historical intel; expired postings auto-flag inactive after 48 hours
• Usage telemetry: rolling 90-day window
• Facility contact information: kept while the related opportunity is active; refreshed or removed as sources change

You can:

• Update your email and focus settings on the account page
• Cancel your subscription anytime via the Stripe customer portal — access continues through end of paid period
• Request a copy of your account data or full deletion by emailing us

California residents (CCPA) and EU residents (GDPR) have the same rights as anyone — there's no separate process. Email us and we'll handle it within 30 days.

Production data lives in Supabase Postgres with row-level security enabled on every user-facing table. Authentication uses Supabase Auth (industry-standard JWT + refresh tokens). HTTPS everywhere. We are not currently SOC 2 certified — that's on the roadmap as we scale.

We use a single first-party cookie for authentication (sb-*-auth-token, set by Supabase). No third-party advertising or analytics cookies. Stripe Checkout sets its own cookies during the payment flow — those are governed by Stripe's privacy policy.

MOLE is a B2B product for adult staffing professionals. We do not knowingly collect data from anyone under 18.

We'll update this page when material changes happen and notify paying users by email at least 30 days before changes take effect.

bkowske@gogpc.com
Good People Company