Privacy Policy

Last updated: March 24, 2026

1. Information We Collect

Account information: Name, email address, and password when you create an account.

Organization data: Business name, timezone, and team member information you add to the platform.

Usage data: Schedules, shifts, time clock entries, time-off requests, and announcements you create within the Service.

Technical data: Browser type, device information, IP address, and cookies for authentication and analytics.

Payment data: Billing information is collected and processed by Stripe. We do not store credit card numbers on our servers.

2. How We Use Your Information

To provide and maintain the Service
To authenticate your identity and secure your account
To send notifications about schedule changes, requests, and announcements
To process payments and manage subscriptions
To improve the Service and develop new features
To communicate service updates and important notices

3. Data Storage & Security

Your data is stored securely using Supabase (PostgreSQL) with encryption at rest and in transit. Authentication tokens are managed via secure HTTP-only cookies. We implement industry-standard security measures including Content Security Policy headers, HTTPS enforcement, and role-based access controls.

4. Third-Party Services

We use the following third-party services to operate the platform:

Supabase — Database hosting and authentication
Stripe — Payment processing and subscription management
Vercel — Application hosting
Resend — Transactional email delivery

Each third-party service has its own privacy policy. We only share the minimum data necessary for each service to function.

5. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this may prevent you from using the Service.

6. Data Sharing

We do not sell, rent, or trade your personal information. We may share data only in the following circumstances:

With third-party services listed above, as necessary to operate the platform
If required by law, court order, or government request
To protect the rights, safety, or property of our users or the public

7. Your Rights

You have the right to:

Access your personal data through your account settings
Export your data using the built-in export features (CSV, PDF)
Delete your account and all associated data through Settings
Correct inaccurate information in your profile
Opt out of non-essential email notifications

California residents may have additional rights under the CCPA. Contact us for more information.

8. Data Retention

We retain your data for as long as your account is active. If you delete your organization, all associated data is permanently removed within 30 days. We may retain anonymized, aggregated data for analytical purposes.

9. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. The "Last updated" date at the top reflects the most recent revision.

11. Contact Us

For privacy-related questions or requests, contact us at privacy@staffschedulerapp.com.