Privacy Policy

MOLE ("MOLE," "we," "us") is a competitive intelligence product for healthcare staffing agencies operated by Good People Company. Our website is moleagent.ai. Questions about this policy go to bkowske@gogpc.com.

We collect three categories of data:

• Account data — your work email, hashed password, and the focus settings (states, specialties) you configure.
• Billing data — handled by Stripe. We see and store: Stripe customer ID, subscription ID, plan tier, status (active/trialing/canceling/past_due), trial end date. We never see or store your card number.
• Usage data — which opportunities you click, when you log in, and which intel you submit (e.g. MSP relationship reports). Used to improve product quality and surface relevant signals back to you.

We do not collect data about candidates, clinicians, or patients. All job-posting data is sourced from public-facing pages on agency websites and aggregator boards. We do not have a clinician-facing product, and we do not sell, broker, or store applicant resumes.

• Run the product (show you opportunity intel matched to your focus settings)
• Process payments via Stripe
• Send transactional emails (login confirmation, payment receipts, sweep alerts) — never marketing spam
• Improve scoring accuracy by tracking which opportunities reps engage with

Three sub-processors only:

• Stripe — payment processing, subscription management, customer portal
• Supabase — primary database, authentication, file storage
• Vercel — application hosting and serverless functions

We do not sell your data, share it with advertisers, or feed it into third-party analytics outside of internal product telemetry.

Job postings displayed in MOLE are aggregated from public-facing pages on agency websites and job boards. We attribute each posting to its originating source and link back to the agency's URL where the posting appears.

We respect robots.txt on every source we scrape and cap request rates. If you operate an agency or board and want your postings excluded, email bkowske@gogpc.com and we'll remove your domain from our crawl roster.

• Account data: kept for the life of your account; deleted within 30 days of account closure
• Billing records: retained 7 years to comply with US tax law
• Job postings: kept indefinitely as historical intel; expired postings auto-flag inactive after 48 hours
• Usage telemetry: rolling 90-day window

You can:

• Update your email and focus settings on the account page
• Cancel your subscription anytime via the Stripe customer portal — access continues through end of paid period
• Request a copy of your account data or full deletion by emailing us

California residents (CCPA) and EU residents (GDPR) have the same rights as anyone — there's no separate process. Email us and we'll handle it within 30 days.

Production data lives in Supabase Postgres with row-level security enabled on every user-facing table. Authentication uses Supabase Auth (industry-standard JWT + refresh tokens). HTTPS everywhere. We are not currently SOC 2 certified — that's on the roadmap as we scale.

We use a single first-party cookie for authentication (sb-*-auth-token, set by Supabase). No third-party advertising or analytics cookies. Stripe Checkout sets its own cookies during the payment flow — those are governed by Stripe's privacy policy.

MOLE is a B2B product for adult staffing professionals. We do not knowingly collect data from anyone under 18.

We'll update this page when material changes happen and notify paying users by email at least 30 days before changes take effect.

bkowske@gogpc.com
Good People Company