Privacy Policy
This policy explains what personal information ShiftCrew collects, why, who we share it with, and the choices and rights you have. ShiftCrew operates the early-access event-staffing marketplace at joinshiftcrew.com. Questions or requests: support@joinshiftcrew.com. See also our Terms of Service.
We wrote this policy to meet the strictest U.S. state privacy laws, including the California Consumer Privacy Act as amended by the CPRA, and the privacy laws of Virginia, Colorado, Connecticut, Texas, and other states. We extend the rights below to every user, wherever you live.
1. Information we collect
| Category | What it includes | Source |
|---|---|---|
| Identifiers | Email address, account ID, display name | You (sign-up and profile) |
| Profile and professional information | Role (worker or vendor), city and state, business name, bio, experience and availability | You |
| Marketplace activity | Shifts you post (title, city/state, dates, time zone, pay, headcount, duties, meeting address, arrival instructions), applications, offers, status changes, check-ins, private messages, reviews and ratings | You and the other users you work with |
| Interest-list information | Name, email, location, type of work or staffing needs, availability, travel range, experience, consent and submission time, and internal follow-up notes | You (early-interest form) and our team |
| Internet or network activity | A one-way hashed form of your IP address, counted per hour to prevent abuse; session cookies that keep you signed in; technical logs kept by our hosting providers | Automatically, from your device |
We do not collect phone numbers (phone sign-in is not offered), payment or bank details, government ID numbers, precise device location, or biometric data. We do not use advertising or analytics trackers. Please do not put sensitive information (such as health details, ID numbers, or your home address) in your profile, listings, or messages.
Sensitive personal information. The only sensitive information we handle is your account sign-in (email and one-time code), and we use it only to provide and secure your account. We do not use sensitive information to infer characteristics about you.
2. How we use it
- Create and secure your account and send sign-in codes.
- Run the marketplace: show listings, deliver applications, offers and messages, and display ratings.
- Respond to support, privacy, and safety requests.
- Prevent fraud, spam, and abuse, and keep the service secure.
- Contact interest-list members about the pilot (no unrelated marketing).
- Comply with law and enforce our Terms.
We do not use your information for targeted advertising, and we do not use automated decision-making or profiling that produces legal or similarly significant effects.
3. What other users see
Shift titles, city/state, dates, duties, pay, vendor display details, and aggregate ratings are public. Applying shares your profile and application with that vendor. Messages and application details are visible only to the worker and vendor involved. The exact meeting address and arrival instructions are shared only with the vendor and confirmed workers.
4. Service providers
We share personal information only with service providers that process it on our behalf under contracts limiting its use:
- Supabase: database, authentication, and sign-in emails.
- Netlify: website hosting and delivery.
- Porkbun: domain and forwarding of email sent to our support address.
- An email-delivery provider, if configured, to send sign-in codes.
- Cloudflare Turnstile, if enabled, to block automated sign-ups.
We may also disclose information if required by law, to protect the safety of users or others, or as part of a merger or sale of the service (you would be notified).
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the past 12 months. We do not knowingly sell or share information of anyone under 16.
5. How long we keep it
- Account, profile, and marketplace records: while your account is active, then deleted within 90 days of a verified deletion request, except records we must keep to resolve open disputes, prevent fraud, or meet legal obligations.
- Interest-list records: until you withdraw (use Manage my signup with your confirmation code, or email us) or the pilot ends.
- Abuse-prevention counters: hashed and kept about one hour.
- Provider logs and backups: deleted on the providers’ standard schedules.
6. Your privacy rights
You have the right to:
- Know and access the personal information we have about you, its categories, sources, purposes, and who we disclosed it to.
- Delete your personal information.
- Correct inaccurate information (you can also edit your profile in My workspace).
- Portability: get a copy in a commonly used, machine-readable format.
- Opt out of the sale or sharing of personal information, targeted advertising, and profiling. We do none of these, but you may still submit an opt-out.
- Limit the use of sensitive personal information (we already use it only as necessary).
- Non-discrimination: we will not deny service, charge different prices, or treat you differently for using your rights.
7. How to make a request
Email support@joinshiftcrew.com with the subject “Privacy Request” and tell us which right you are using. To protect you, we verify your identity by confirming control of the email address on your account (for example, by replying to our email or entering a one-time code). We may ask for more information only if needed, and we use it only for verification.
Authorized agents. Someone you authorize may submit a request for you. We may ask for your signed permission and ask you to verify your identity directly, unless the agent has a valid power of attorney.
Response time. We confirm receipt within 10 business days and respond within 45 days. If we need more time (up to 45 more days, as the law allows), we will tell you why. Requests are free, up to twice in 12 months.
Appeals. If we decline your request, you can appeal by emailing support@joinshiftcrew.com with the subject “Privacy Appeal” within a reasonable time. We will respond in writing within 45 days (60 days in Colorado) and explain our decision. If you are not satisfied, you may contact your state Attorney General (for example, in Virginia, Colorado, Connecticut, or Texas) or the California Privacy Protection Agency.
8. Global Privacy Control
We honor Global Privacy Control (GPC) and similar browser opt-out signals as a valid request to opt out of sale, sharing, and targeted advertising for that browser, and for your account if you are signed in. Because we do not sell or share information, the signal does not change how the site works.
9. Cookies
We use only essential cookies that keep you signed in and protect against abuse. We do not use advertising, analytics, or cross-site tracking cookies.
10. Children
ShiftCrew is for adults 18 and older. It is not intended for anyone under 16, and we do not knowingly collect information from children under 13. If you believe a child has given us information, email support@joinshiftcrew.com and we will delete it.
11. Security
We use encrypted connections (HTTPS), one-time sign-in codes instead of passwords, access checks on every marketplace action, server-only database access, and limited administrator access. No system is perfectly secure; if a breach affects your information, we will notify you as required by law.
12. California “Shine the Light”
We do not disclose personal information to third parties for their own direct-marketing purposes.
13. Changes to this policy
We will update the effective date above when we change this policy, and for material changes we will notify account holders by email or a notice on the site before the change takes effect.
14. Contact
ShiftCrew · support@joinshiftcrew.com
Open my workspace