Privacy Policy

Effective August 13, 2026

This policy explains what Selfie Shifts collects, why, and what control you have over it. The short version: we collect what's needed to run a scheduling service, we don't sell your data, and you can delete your account.

1 · What we collect

• Account details — name, email address, phone number, and (optionally) a mailing address and profile photo.
• Work records — shifts, schedules, time-off requests, availability, scheduling preferences, time-clock punches, and messages/announcements within your workplace.
• Social Security numbers — when an employer enters one, we immediately convert it to a one-way cryptographic hash plus the last four digits. The full number is never stored and cannot be recovered from what we keep. It's used only to prevent duplicate employee records.
• Documents — files you or your employer upload (certifications, policies, and similar).
• Billing — card details are collected by Stripe, our payment processor, directly in your browser. Card numbers never touch our servers; we keep only the card's last four digits, its expiry, and receipts.
• Usage basics — sign-ins and app activity (used for security and so organization owners can see whether their staff use the apps).

2 · How we use it

To run the Service: building schedules, sending the notifications you've enabled (email, push, and text), matching shift offers to eligible staff, producing timesheets, and billing subscriptions. If your organization uses the automatic schedule assistant, shift and preference data (never SSNs or contact details) is processed by our AI provider to draft schedules. We don't sell personal information or use it for third-party advertising.

3 · Who can see your information

• Your workplace — managers and admins of an organization you work for can see your work records there, your contact info, and anything you share with them. Your private preferences (like coworkers you'd rather not work with) are visible to managers but never to coworkers.
• Service providers — we use a small set of processors to run the Service: Microsoft Azure (hosting, Canada), Stripe (payments), Twilio (text messages), Google Firebase (mobile push notifications), our email delivery provider, and OpenAI (schedule assistant). Each receives only what its job requires.
• Legal — we disclose information if the law genuinely requires it.

4 · Where it lives and how it's protected

Data is hosted on Microsoft Azure in Canada, encrypted in transit and at rest. Passwords are stored as salted hashes; SSNs only as the one-way hash described above. Access to production systems is limited to those who operate the Service.

5 · How long we keep it

• Notification history is deleted after 90 days.
• Work records (schedules, punches, timesheets) are kept while the organization's account is active, since they're the employer's business records.
• When you delete your account, your personal details are removed as described below.

6 · Your choices

• Notifications — choose channels and topics on your Preferences page, or mute categories entirely.
• Corrections — update your own contact details on your Profile page.
• Deletion — delete your account from your Profile page. This removes your name, contact details, photo, documents, notification history, and sign-in ability. Schedules and timesheets your employers are legally required to keep are retained but no longer connected to your identity. Organization owners must first close or hand over their organization.

7 · Children

The Service is for workplaces and isn't directed at children. Don't use it unless you're old enough to be legally employed in your jurisdiction.

8 · Changes

If we make material changes to this policy we'll notify account holders by email or in the Service before they take effect.

9 · Contact

Privacy questions or requests: support@selfieshifts.com.