Last updated: September 17, 2026
This Privacy Policy explains how GabADoc ("GabADoc," "we," "us," or "our") collects, uses, and shares information in connection with the GabADoc hospitalist scheduling and staff-communication platform (the "Service").
GabADoc is a business-to-business software platform. It is provided to healthcare staffing groups and hospitals ("Customers"), whose administrators enroll their own employees and contracted providers ("Users") to use the Service. Individuals do not sign up for GabADoc directly - access is set up on their behalf by their employer's administrator.
Information We Collect
Account and profile information: name, work email address, mobile phone number, job role, and employer/organization.
Scheduling information: shift assignments, time-off requests, shift-swap requests, on-call assignments, and related scheduling history, entered by the Customer's administrators or by Users themselves.
Communications data: the fact that a notification was sent (e.g., a schedule change, a swap request, a time-off decision, an on-call page) and its delivery status. Message content sent by SMS and email is limited to operational scheduling notices and does not include patient health information.
Billing information: for Customers who subscribe to a paid plan, billing is handled by our payment processor, Stripe. GabADoc does not receive or store full payment card numbers.
Files Users upload: such as profile photos or credential/document attachments, stored in our cloud file storage.
Technical information: standard log data such as IP address, browser type, and timestamps, collected automatically when the Service is used.
How We Use Information
We use the information above to operate the scheduling platform (build, display, and update shift schedules; process time-off and swap requests; route on-call pages), send notifications by SMS, email, and in-app messaging about schedule changes, requests, and approvals, provide customer support and respond to inquiries, process subscription billing on behalf of Customers, maintain the security, integrity, and reliability of the Service, and comply with legal obligations.
We do not sell personal information, and we do not use scheduling or messaging data for advertising.
SMS / Text Messaging
Users are enrolled to receive SMS notifications by their employer's administrator as part of onboarding onto the Service - this is not a public, self-serve sign-up. Message types include shift schedule updates, shift-swap requests, time-off request decisions, and on-call paging alerts.
Message frequency varies based on scheduling activity and on-call assignments. Message and data rates may apply. Reply STOP at any time to opt out of SMS messages. Reply HELP for help. Carriers are not liable for delayed or undelivered messages.
Opting out of SMS does not remove a User from the underlying schedule - it only stops text notifications. Because on-call paging is a safety-relevant function of the Service, a Customer's administrator may enroll on-call staff with the expectation that they remain reachable through the Service.
How We Share Information
We share information only as needed to operate the Service: with the Customer that employs or contracts the User (the User's own employer/organization is the data controller for scheduling data and can access it directly), and with service providers who process data on our behalf, under contract and only for the purposes described here - Twilio (delivery of SMS and voice notifications), Resend (delivery of email notifications), Stripe (subscription billing and payment processing), and Cloudflare R2 (secure cloud storage for uploaded files/documents). We also share information as required by law, or to protect the rights, safety, or property of GabADoc, our Customers, or others.
We do not share personal information with third parties for their own marketing purposes.
Data Retention
We retain scheduling, request, and communication records for as long as a Customer's account is active, and for a reasonable period afterward to comply with legal, tax, and recordkeeping obligations, after which data is deleted or anonymized.
Data Security
We use industry-standard safeguards, including encrypted transmission (TLS) and access controls limiting who can view Customer data, and we work with vendors (Twilio, Resend, Stripe, Cloudflare) that maintain their own security certifications. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Children's Privacy
The Service is intended for use by adult healthcare professionals and administrative staff. It is not directed to, and we do not knowingly collect information from, children under 13.
Your Choices
Users may opt out of SMS by replying STOP, or ask their organization's administrator to update their notification preferences or contact information. Users may request access to, correction of, or deletion of their information by contacting their employer's administrator, or by contacting us directly using the information below.
Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version here with a new "Last updated" date.
Contact Us
Questions about this Privacy Policy or how your information is handled can be sent to:
GabADoc
This document reflects GabADoc's actual data practices as of the date above.