Privacy Policy

What we collect

• Account data: your restaurant's name, your email address, and a hashed (never plaintext) password.
• Employee data you enter: name, and optionally an hourly rate, email, and a PIN used for self-identification when requesting time off or a shift swap.
• Schedule data: shifts, day-off/swap requests, and published-week history.
• Reservation data you enter: a customer's name and, optionally, phone number, for the purpose of confirming reservations.
• Billing data: your subscription status. Payment card details are collected and stored by Stripe directly — we never receive or store them.
• Session cookies: a single cookie identifying your logged-in session. We don't use advertising or third-party tracking cookies.

How we use it

Solely to operate the Service: authenticating your account, displaying and publishing schedules, sending notification emails you've configured (e.g. a new day-off request), and processing billing through Stripe. We don't sell or share your data with third parties for advertising.

Who processes it

Data is hosted on Vercel (application) and Neon (database), both of which provide infrastructure only and don't use your data for their own purposes. Payments are processed by Stripe. Notification emails, when configured, are sent via Resend. Each of these providers has its own privacy policy governing how they handle data on our behalf.

Data retention and deletion

We retain your data for as long as your account is active. To request deletion of your account and its data, contact us at the address below.

Children's privacy

The Service is intended for business use and not directed at children.

Changes to this policy

We may update this policy from time to time; changes take effect when posted here.

Contact

Questions about this policy or your data? Contact us at support@shiftful.app.