Privacy Notice

The ODBridge platform is operated by ODBridge Inc, a Pennsylvania corporation.

Contact us at hello@odbridge.careers, or by post to ODBridge Inc, 303 1st St., Charleroi, PA 15012.

From everyone: your name and email address, and where you give them, your phone number and city. We also hold the signed links we send you, records of when they were used, and the session cookies described below.

From doctors: the states you are licensed in and the licensure answer as you wrote it; the states and areas you are looking in; whether you would relocate; your graduation band; hours and employment type; scope of practice; preferred setting; career path and any ownership interest; your timeline; and your compensation expectation and model. Where you give them, your school, your current employer, and a LinkedIn profile link. Also your answers when we ask whether you have been hired, and a record of which practices invited you and what you did with each invitation.

Your CV, if one is added to your profile. It is optional, and a profile without one is matched, shown and invited exactly the same. We hold the file, its name, its size and a checksum. It is never used for matching - matching runs on your profile answers alone - and it is never part of your anonymous details. A CV can be added while your profile is being built, or through a private link we email you. Because the profile form does not verify who is using it, a CV added there is held but shown to nobody at all until you confirm from your own email that it is yours. If you did not add it, one click removes it.

We do not ask doctors for a date of birth, a government identifier, a license number, financial account details, or any health information.

From practices: practice name, website, city and state, practice type, and the size of your doctor and support teams. The name, email and role of the person who signs up and of anyone else you add. For each position: location, employment type, weekly hours, scope, ownership offered, mentorship, experience sought, compensation range and model, licensing requirement, and timing.

Automatically: our hosting provider records standard server logs when any page is requested — IP address, timestamps, browser and device information, referring page, and security events.

When you accept an agreement on ODBridge, we record what is needed to prove what you accepted: the document version and its SHA-256 fingerprint, your name and email, the date and time, your IP address, your browser's user agent, and, where a signature provider was used, that provider's identifiers and audit trail together with the signed document.

We keep this because it is the evidence that an agreement exists. It is retained separately from your profile and on a different schedule.

Practices only. Doctors never provide payment information to ODBridge and are never charged.

Card details are collected by Stripe on Stripe's own hosted page and are sent to Stripe directly. ODBridge does not receive, process or store full card numbers or bank-account numbers. What we hold is a Stripe customer identifier and a payment-method token, and where displayed, the card brand and last four digits — enough to show you which card is on file and nothing more.

We also hold billing and transaction records relating to placement fees.

This is the part doctors most need to understand, so it is set out in full.

What forms the anonymous card. A practice with a matching open position sees a card built from your profile: your licensure states, the states you are targeting, hours and employment type, relocation, graduation band, scope, setting, career path, timeline, and compensation band, together with a match score and the reasons the match came up.

What is never on the card. Your name, email address, phone number, school, current employer, town, and photograph.

What the score is. ODBridge computes a score, a band and a written explanation for each candidate-position pair, from the profile answers and position requirements. It is decision support for a practice deciding whom to invite. It is not a verification of your credentials, not an assessment of your competence, and not a hiring decision. We do not verify anything you tell us, and we say so to practices.

How identity is disclosed. A practice cannot pay to see you, cannot unlock you by accepting terms or putting a card on file, and cannot unlock you by sending an invitation. When a practice invites you, we tell you who they are and pass on any message they wrote. If you decline, the practice is told the invitation was declined and is told nothing that identifies you. If you accept — and only then — your name and contact details are disclosed to that practice. We call that an Introduction Event, we record the time of it, and it is the moment the practice's fee obligations begin to run.

Your CV. If one is added it is stored privately, with no public address of any kind, and it is readable only through ODBridge itself. No practice can see it at all until you have confirmed, from the email address on your profile, that it is yours. A practice can then open it only after you have accepted that practice's invitation - never before, never any other practice, and never as part of your anonymous card. You can replace or remove it at any time. If you sent us a CV before ODBridge could store files itself, we have moved that file into the storage described above and attached it to your profile. It is covered by everything in this section, including your ability to replace or remove it at any time.

When your card is shown, and when you agree to anything. Your anonymous card enters the matching pool when you finish your profile, and practices with a matching open position can see it from that point. You are not asked to agree to anything in order to be listed anonymously. You accept the ODBridge Doctor Agreement at the moment a practice invites you and you choose to accept — the same click. Declining an invitation requires no agreement at all.

To provide, secure and operate the platform. To match profiles against open positions and produce scores and explanations. To send invitations, notices and service messages. To effect an introduction a doctor has authorised. To administer agreements, fee attribution and payments. To ask doctors, at intervals, whether they have been hired. To prevent abuse and keep records of security events. To comply with law, respond to lawful requests, and establish, exercise or defend legal claims.

We also produce aggregated or properly deidentified analytics about how the marketplace is working. Deidentified data is not re-identified.

When you delete a profile. We remove it from matching immediately, and delete or irreversibly deidentify the profile and contact data from our active systems within 30 calendar days. Your CV file is deleted from storage in the same 30 days; because a file cannot be deleted by the same mechanism as a database record, that step is tracked separately and a deletion is not treated as complete until it has happened.

Backups and provider logs. Our database keeps a short restore window — currently no more than six hours — after which deleted data cannot be recovered from it. We do not keep separate long-term backups of candidate profiles. Two providers keep short operational logs on their own cycles, independent of your profile: our email delivery provider keeps a record of each message sent for 30 days, and our hosting provider keeps server request logs for 1 day. These age out automatically. A message we send you confirming a deletion will itself appear in that 30-day mail log.

What survives a deletion, and why. Acceptance evidence — the minimum record needed to prove which version you accepted — is kept for four years after profile deletion or the last acceptance, whichever is later. If you accepted an invitation, an Introduction Event exists and a 12-month attribution window runs from it; we keep the minimum record identifying that event through the window, and delete or irreversibly deidentify it no later than 90 days after the window closes where there has been no placement, payment issue, dispute or legal hold. Where a placement, invoice, payment or dispute exists, records are kept for four years after final payment or final resolution.

About the attribution record, said plainly. That record still relates to you. We retain it separately and use it only to administer the practice's attribution and payment obligations, maintain contract evidence, comply with law, and resolve disputes. It does not keep your profile active or visible to practices.

A legal hold or a longer mandatory retention period overrides these schedules while it applies.

Browsing this site sets no cookies. Two are set only if you follow a personal link we sent you, and both exist solely to keep you signed in on the page that link opens: odb_practice (practices, 7 days) and odb_doctor (doctors, 30 days). Both are HTTP-only, sent only over HTTPS, and restricted to same-site navigation. Neither is used for advertising. ODBridge administrators signing in to internal tools also receive a session cookie set by Clerk; doctors and practices never do.

We count page views using Vercel Web Analytics. It records that a page was viewed — which page, which country, what type of device — as a first-party script, without cookies and without anything which identifies you.

There is no advertising network and no tracking pixel, and nothing here follows you to other sites. We do not sell personal information, and we do not share it for cross-context behavioural advertising.

With the other side of the marketplace — anonymous card fields to practices with a matching open position; your identity and contact details to a practice only where you accepted its invitation.

With service providers, who process information solely to operate ODBridge on our instructions: Neon (database hosting), Vercel (application hosting, server logs, page-view analytics, and private file storage for CVs), Resend (transactional email), Kit (email list and marketing messages), Stripe (payment method collection, practices only), Dropbox Sign (electronic signature and audit trail), Clerk (authentication for ODBridge internal administrators only), and GoDaddy with Microsoft 365 (email hosting for support and contract correspondence). This list is current as of the effective date and is updated before any new provider receives production personal data.

Otherwise — where required by law or lawful request; to establish, exercise or defend legal claims; to investigate abuse; to professional advisers under confidentiality; and, in a merger, financing or sale of the business, to the counterparty and its advisers, subject to this notice.

We do not sell your information, and we do not tell your employer.

Where processing happens. ODBridge operates in the United States, and our service providers are configured to store personal information in the United States. Some providers may access it from elsewhere for support or security purposes under their own terms; where a provider's terms require a transfer mechanism, we put one in place before the affected processing begins.

You can pause your profile so it stops appearing to practices; correct anything in it; get a copy of what we hold about you; delete your profile, subject to the retention periods above; withdraw from matching entirely; and unsubscribe from marketing email using the link in any such message. Service messages about an invitation or an agreement are not marketing.

Depending on your location, you may have additional rights under state law — including rights to know, access, correct, delete, obtain a portable copy, opt out of sale or targeted advertising and of certain profiling, limit the use of sensitive information, and appeal a refusal. We extend the rights listed above to everyone regardless of residency.

How to ask. Email hello@odbridge.careers. We may need to confirm you control the account before acting, and will only ask for what is needed to do that. We will respond within the period required by applicable law, and where a request is refused we will tell you why and how to appeal.

An honest limit. Deleting your profile does not undo an introduction you already accepted. A practice you agreed to meet already holds your contact details.

We use access controls, encryption in transit, signed and expiring access links, and database-level rules which prevent an identity from being disclosed without the doctor's recorded acceptance. Payment card data is handled by Stripe and does not reach our systems.

ODBridge is designed for licensed optometrists, optometry practices, and ophthalmology practices.

Version and effective date are subject to change.

Some changes may require your authorization. Where a change materially affects what practices can see, who can see it, when or how your identity or contact details are disclosed, how we use or retain your personal information, mandatory dispute procedures, or a material limitation of your rights. Additional changes take effect on the stated effective date after notice.

No change retroactively authorizes a disclosure, alters an introduction event, consent, or an accrued right under an earlier version.

hello@odbridge.careers

ODBridge is operated by ODBridge Inc, a Pennsylvania corporation, 303 1st St., Charleroi, PA 15012.