Privacy Policy

Introduction

ShiftSharks ("we", "us", "our") operates shiftsharks.com and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our volunteer scheduling service.

Information We Collect

We collect information that you provide directly to us:

• Account Information: When you create an account, we collect your name and email address.
• Event Data: Information you input about events, tasks, and volunteers, including names, contact information, availability, and scheduling preferences.
• Usage Data: Information about how you interact with our service, including pages visited, features used, and actions taken. This data is anonymized for analytics purposes.
• Payment Information: Payment and billing information is processed securely through Stripe. We do not store your credit card details on our servers.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our volunteer scheduling service
• Process payments and manage your subscription
• Send you service-related communications, including account notifications and updates
• Respond to your comments, questions, and customer service requests
• Analyze usage patterns to improve our service and develop new features
• Detect, prevent, and address technical issues and security vulnerabilities

Third-Party Services

We use the following third-party services to operate ShiftSharks. Each processes data according to their own privacy policies:

• Supabase: Provides database hosting and authentication services. View their privacy policy at supabase.com/privacy
• Stripe: Processes all payment transactions securely. View their privacy policy at stripe.com/privacy
• OpenRouter: Powers our AI-driven schedule generation features. View their privacy policy at openrouter.ai/privacy

Data Security

We implement appropriate technical and organizational measures to protect your data:

• All data is encrypted in transit using TLS (Transport Layer Security)
• Data at rest is encrypted using industry-standard encryption
• Access to personal data is restricted to authorized personnel only
• We regularly review our security practices and update them as needed

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

Data Retention

• Account Data: We retain your account information for as long as your account is active or as needed to provide you services.
• Event Data: You can delete event data at any time through the dashboard. Deleted data is removed from our active systems immediately.
• Account Deletion: Upon account deletion, your personal data and associated event data will be removed from our systems within 30 days.

Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information through your account settings
• Deletion: Delete your account and associated data at any time
• Export: Export your event data in a portable format
• Objection: Object to certain processing of your data

To exercise these rights, please contact us through the contact information provided at the end of this policy.

Cookies

We use cookies and similar technologies to:

• Keep you signed in (essential authentication cookies)
• Remember your preferences and settings
• Understand how you use our service (anonymized analytics)

We do not use third-party tracking cookies for advertising purposes. Essential cookies are required for the service to function properly.

Children's Privacy

Our service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us. If we discover that a child under 13 has provided us with personal information, we will delete such information from our systems.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last updated" date
• Sending you an email notification to the address associated with your account
• Displaying an in-app notice when you next sign in

Your continued use of ShiftSharks after any changes indicates your acceptance of the updated Privacy Policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at our contact page.