Privacy Policy

What we collect

• Account data: your restaurant's name, your email address, and a hashed (never plaintext) password.
• Employee data you enter: name, and optionally an hourly rate and email address. An employee's email is used to invite them to create their own login, which they use (with a password only they know) to view their schedule and request time off or a shift swap.
• Push notification tokens: a device identifier used to deliver schedule and request notifications through Apple/Google's push services. Not used for advertising or tracking.
• Schedule data: shifts, day-off/swap requests, and published-week history.
• Reservation data you enter: a customer's name and, optionally, phone number, for the purpose of confirming reservations.
• Billing data: your subscription status. Payment card details are collected and stored by Stripe directly — we never receive or store them.
• Session cookies: a single cookie identifying your logged-in session. We don't use advertising or third-party tracking cookies.

How we use it

Solely to operate the Service: authenticating your account, displaying and publishing schedules, sending notification emails you've configured (e.g. a new day-off request), and processing billing through Stripe. We don't sell or share your data with third parties for advertising.

Who processes it

Data is hosted on Vercel (application) and Neon (database), both of which provide infrastructure only and don't use your data for their own purposes. Payments are processed by Stripe. Notification and invite emails are sent via Resend. Push notifications are delivered through Firebase Cloud Messaging (Google) and Apple's push notification service. Each of these providers has its own privacy policy governing how they handle data on our behalf.

Data retention and deletion

We retain your data for as long as your account is active. To request deletion of your account and its data, see our account deletion instructions.

Children's privacy

The Service is intended for business use and not directed at children.

Changes to this policy

We may update this policy from time to time; changes take effect when posted here.

Contact

Questions about this policy or your data? Contact us at support@shiftful.app.