Shiftomatch — Privacy Policy

Account & Profile Information

• Name, email address, password
• For Workers: phone number, general location/area, job-type tags, work history entries, availability, optional profile/work photos
• For Owners: restaurant name, location, contact information

Activity Information

• Shifts posted, shifts expressed interest in, matches made, ratings given/received, messages sent through the Platform, support chat/ticket content

Automatically Collected Information

• Log data (IP address, browser type, device information, pages visited, timestamps)

We use the information we collect to:

• Operate the core matching functionality (showing relevant shifts to Workers, relevant candidates to Owners)
• Calculate and display Trust Score / reliability indicators
• Reveal contact information between an Owner and a Worker only after a mutual match is confirmed
• Send transactional emails (account confirmation, password reset, shift notifications) via our email provider, Brevo
• Provide customer support, including through our AI support assistant (powered by the Anthropic API) and, where the AI cannot resolve an issue, via direct human support
• Translate user-submitted notes on request (powered by the Anthropic API)
• Improve and maintain the Platform, and detect fraud or abuse

• Between matched users: Contact information is shared between an Owner and a Worker only after both parties have confirmed a match. Before that point, only limited profile information (e.g., job-type tags, area, general work history, rating tier) is visible.
• Service providers: We share information with third-party vendors who help us operate the Platform, including Supabase (database & authentication), Netlify (hosting), Brevo (transactional email), Anthropic (AI-powered support chat and note translation), and Cloudinary (image hosting). These providers are only permitted to use your information to provide services to us.
• Legal requirements: We may disclose information if required by law, subpoena, or to protect the safety of our users.

We do not sell your personal information to third parties.

We retain account and activity information for as long as your account is active, and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data (see Section 6).

The Platform is not directed to individuals under 18, and we do not knowingly collect information from anyone under 18.

You may:

• Access, update, or correct your profile information at any time through your account settings
• Request deletion of your account and associated personal data by contacting support@shiftomatch.com
• Opt out of non-essential email communications (transactional emails related to your account, such as password resets, cannot be opted out of while your account is active)

If you are a California resident, you may have additional rights under the CCPA, including the right to know what personal information we collect and the right to request deletion. Contact us at support@shiftomatch.com to exercise these rights.

We use reasonable administrative, technical, and physical safeguards to protect your information, including database-level access controls (Row-Level Security) that restrict when and to whom contact information is revealed. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

The Platform may use cookies or similar technologies necessary for login sessions and basic functionality.

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date. Continued use of the Platform after changes take effect constitutes acceptance of the revised policy.

Questions about this Privacy Policy can be sent to support@shiftomatch.com.