Privacy Policy

1. Who We Are

ShiftPact operates a shift marketplace that connects businesses and workers. This Privacy Policy explains what data we collect, why we collect it, and how it's used. We keep things plain — no legalese designed to obscure what we're actually doing with your information.

If you have questions or concerns, contact us directly at shiftpact@polsia.app.

2. Data We Collect

When you create an account:

• Name — displayed to the other party when a shift is posted or interest is expressed.
• Email address — used to log in and receive platform notifications.
• Role — whether you're a business or a worker.
• Password — stored as a hashed value. We never store or transmit your password in plain text.

When workers use the platform:

• Shift history — shifts you've expressed interest in, been accepted for, and confirmed.
• Performance data — show-up rate, number of shifts completed, and ratings from businesses.

When businesses use the platform:

• Business name — shown on shift listings.
• Shift data — shifts you've posted, worker selections, and outcomes.

Automatically collected:

• Basic usage data — page visits and general platform activity (via anonymous analytics). We do not track individual users across other sites.

3. How We Use Your Data

We use the data we collect to:

• Run the marketplace — display shift listings, worker profiles, and facilitate the mutual matching process.
• Verify performance — build a verified work record for workers based on actual completed shifts.
• Authenticate you — keep your account secure and your session active.
• Send necessary communications — notifications about shifts, matches, and account activity. No marketing spam.
• Improve the platform — understand how the platform is used so we can make it better.

We do not sell your data. We do not use your data to train AI models for third parties. We do not show you targeted advertisements.

4. What Businesses See About Workers

When a worker expresses interest in a shift, the business can see:

• The worker's name
• Number of completed shifts on ShiftPact
• Show-up rate
• Average rating
• When they joined the platform

Businesses do not see a worker's email address, contact information, or any data beyond the above.

5. What Workers See About Businesses

When browsing shifts, workers can see:

• Business name
• Shift details (role, date, time, location, pay rate, requirements)

Workers do not see business contact information or account data.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we remove your personal data from active systems within 30 days. Some aggregated or anonymized data may be retained longer for platform analytics.

Shift history and performance records are part of the platform's verified record system. If you request account deletion, this data is removed along with your account.

7. Third-Party Services

ShiftPact uses a small number of third-party services to operate:

• Neon (database hosting) — your data is stored on Neon's PostgreSQL infrastructure. Neon Privacy Policy.
• Render (hosting) — our web service runs on Render. Render Privacy Policy.

We do not use Facebook Pixel, Google Analytics, or other advertising trackers.

8. Your Rights

You have the right to:

• Access the data we hold about you — email us and we'll send it.
• Correct inaccurate data — update your profile in the app or contact us.
• Delete your account and data — email us at shiftpact@polsia.app with a deletion request.
• Object to how we use your data — contact us and we'll work through it.

We don't make it hard to exercise these rights. Just email us.

9. Security

We take reasonable precautions to protect your data:

• Passwords are hashed using scrypt (a strong, slow hashing function). We cannot recover your password — only reset it.
• All connections to ShiftPact use HTTPS (TLS encryption in transit).
• We limit access to user data to only what's needed to operate the platform.

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at shiftpact@polsia.app.

10. Children

ShiftPact is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If we become aware that a user is under 18, we will terminate the account.

11. Changes to This Policy

If we make material changes to this Privacy Policy, we'll update the date at the top. For significant changes, we'll notify active users by email. Continued use of ShiftPact after changes means you accept the updated policy.

12. Contact

For any privacy-related questions, data requests, or concerns, email us at shiftpact@polsia.app. We'll respond within a few business days.