Privacy Policy

Your privacy matters. This Privacy Policy explains how Swipe-A-Shift collects, uses, shares, and protects your personal information. We're transparent about our practices and committed to keeping your data secure. By using Swipe-A-Shift, you agree to this policy.

1. Information We Collect

We collect information you provide directly, information generated when you use the platform, and information from third parties.

Account & Profile Information:

Name, email, phone number, location
Profile photo, work experience, skills, availability
Payment methods (venues) and Stripe Connect account (workers)

Activity & Usage Information:

Shifts posted, applied, accepted, completed
Payment history, ratings, reviews, communications
Platform usage patterns

Verification Information:

ID verification via Stripe Identity (Tier 2)
Background checks via Checkr (Tier 3-4, with consent)
Certifications (ServSafe, licenses)

2. How We Use Information

Match workers with shifts and process payments
Verify identities and run background checks (with consent)
Send notifications and respond to support requests
Detect fraud and enforce our Terms of Service
Improve platform features and pricing models
Comply with legal requirements (tax forms, legal requests)

3. How We Share Information

We do NOT sell your personal information. We share data only in specific circumstances:

Service Providers (Under Contract):

Stripe Connect: Payment processing, ID verification, tax reporting (privacy policy)
Checkr: Background checks with your consent (privacy policy)
Supabase: Database hosting, authentication (privacy policy)
Vercel: Platform hosting, CDN (privacy policy)
Analytics and email service providers

With Other Platform Users:

Venues see: Worker name, location (city), ratings, verification badges
Workers see: Venue name, address, posted shift details, ratings
Neither sees: Phone numbers, emails, payment info, exact addresses

For Legal Reasons:

To comply with law, enforce Terms, prevent fraud, or protect rights and safety

4. Data Security

All data encrypted in transit (HTTPS/TLS)
Payment data encrypted via Stripe (PCI-DSS compliant)
Access limited to authorized personnel with MFA
Regular security audits and monitoring

5. Your Rights & Choices

Access & Update: View/edit your info in account settings
Delete: Close your account anytime (some data retained for legal compliance)
Marketing Opt-Out: Unsubscribe from marketing emails
GDPR/CCPA Rights: Request access, correction, deletion, or data portability

Contact privacy@swipeashift.com for data requests.

6. Data Retention

Account info: While active + 7 years after closure
Shift & payment records: 7 years (tax/legal requirement)
Background checks: 7 years (FCRA requirement)

7. Children's Privacy

Swipe-A-Shift is not for individuals under 18. We don't knowingly collect information from minors.

8. Changes to This Policy

We may update this policy. Material changes will be posted with a new "Effective" date and we'll email you.

Privacy Questions?

Privacy inquiries: privacy@swipeashift.com
Security concerns: security@swipeashift.com
Compliance: compliance@swipeashift.com

Effective Date: November 5, 2025

Version: 2.0 - Enhanced

Business Address: 170 Commerce Way, Suite 200, Portsmouth, NH 03801

← Back to Legal Center