Privacy Policy

01 Who We Are

OpenCurtain (“we,” “us,” or “our”) is a verified anonymous review platform for health care professionals. We operate at opencurtain.com and are based in South Florida, United States.

This Privacy Policy explains how we collect, use, and protect information when you use our website and services. By using OpenCurtain, you agree to the practices described in this policy.

02 Information We Collect

Account information

When you create an account, we collect:

• Email address
• Password (stored in encrypted form — we never see your plain-text password)
• Your health care role (e.g. RN, CNA, PA-C)

Verification information

To confirm you are a real health care professional, we collect one of the following:

• Facility badge photo and identity verification (selfie or driver's license/state ID) — used solely to confirm your identity at the time of verification. All images are permanently deleted from our systems immediately after the verification process completes. They are never stored, indexed, or linked to your account or review.

Review content

When you submit a review, we collect the information you provide — ratings, data points, written comments, and tags. This content is stored anonymously. It is visible to you on your account but is never visible to the public or where you work.

Usage data

We automatically collect basic technical information when you use the platform, including your IP address, browser type, device type, pages visited, and time of access. This is used for security, fraud prevention, and improving the platform.

Waitlist

If you joined our waitlist, we collected only your email address. This is used solely to notify you when OpenCurtain launches and will not be used for marketing without your consent.

03 How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Verify that you are a credentialed health care professional
• Enable you to submit and access verified, anonymous reviews
• Send account-related emails (password resets, security notices)
• Send platform updates and announcements if you've opted in
• Detect and prevent fraud, abuse, and platform manipulation
• Improve the platform based on aggregate, anonymized usage patterns

04 What We Do Not Do

• We do not sell your personal information to any third party
• We do not share your identity with the public, hospitals, employers, or any organization
• We do not link your name, email, or account to any review you submit
• We do not store any information used to verify you — badge photos, selfies, and ID photos are discarded immediately after verification
• We do not use your data to serve targeted advertisements
• We do not share data with data brokers or marketing companies

05 Anonymity Architecture

Anonymity is not just a feature — it is the foundation of how OpenCurtain is built. Our system is designed so that review data and identity data are stored and processed separately. Your reviews are visible to you on your account, but are never visible to the public or where you work.

When you submit a review, the system records only that a verified health care professional submitted a review for a given facility. Your account identifier is not attached to the review record. This means that even OpenCurtain cannot trace a specific review back to you.

06 Data Sharing & Third Parties

We do not sell or rent your personal information. We may share limited information only in the following circumstances:

Service providers

We work with trusted third-party providers to operate the platform (e.g. hosting, email delivery, analytics). These providers are contractually prohibited from using your data for any purpose other than providing services to us.

Legal requirements

We may disclose information if required by law, court order, or governmental authority. We will notify you of such requests to the extent permitted by law. As noted above, our anonymity architecture means we cannot identify the author of any specific review even in response to such requests.

Business transfers

If OpenCurtain is acquired or merges with another entity, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

07 Data Retention

We retain your account information for as long as your account is active. Review content is retained indefinitely in anonymous form to maintain the integrity of the platform's dataset.

Information used to verify you — including badge photos, selfies, and driver's license or state ID photos — is never stored. Verification data is discarded immediately upon completion.

08 Your Rights

You have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request that inaccurate information be corrected
• Deletion — request that your account and associated personal information be deleted. Because reviews are stored anonymously with no link to your account, anonymous review content cannot be selectively deleted.
• Opt out — unsubscribe from non-essential communications at any time
• Portability — request your personal data in a portable format

To exercise any of these rights, contact us at hello@opencurtain.com.

09 Security

We take reasonable technical and organizational measures to protect your information, including encryption of data in transit and at rest, access controls, and regular security reviews.

No system is completely secure. If you believe your account has been compromised, contact us immediately at hello@opencurtain.com.

10 Cookies

We use essential cookies to keep you logged in and maintain your session. We do not use advertising cookies or third-party tracking cookies.

You can disable cookies in your browser settings, but doing so may prevent certain features from working correctly.

11 Children's Privacy

OpenCurtain is intended for use by health care professionals and is not directed at anyone under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has created an account, we will delete it.

12 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page and notify registered users by email for any material changes.

Continued use of OpenCurtain after changes take effect constitutes your acceptance of the updated policy.