Privacy Policy

Effective August 4, 2026 · last updated August 2026

1. What we collect

Member profile data — name, work email, phone, employee id, seniority rank, qualifications — provided by your Union or by you.
SMS opt-in data — if you sign up for text alerts: the mobile number you provide and a record of your consent (when and where you opted in, and any opt-out).
Trade activity — posts, requests, approvals, and related notes.
Technical data — authentication logs and IP addresses for security.

2. How it's used

Solely to operate the service: matching and notifying members about shift trades, enforcing the Union's trade rules, and giving Union administrators the records they need. We do not sell personal data or use it for advertising.

3. Text messaging (SMS)

If you opt in to text alerts, we send SMS messages about shift-trade activity in your Union's workspace — new posts matching your alert settings, requests on shifts you've posted, trade approvals, and report-time reminders. Texts are sent only after you provide your mobile number and actively check the consent box; consent is never assumed and is not a condition of union membership or employment.

No sharing of mobile numbers: mobile phone numbers and text-messaging originator opt-in data and consent are not shared with, sold to, or rented to any third parties or affiliates for marketing or promotional purposes — this information is not shared with any third party, except our SMS delivery provider (Twilio), acting on our behalf solely to deliver the messages you signed up for.
Message frequency varies based on your Union's trade activity and your alert settings.
Message and data rates may apply, depending on your mobile carrier plan.
Opting out: reply STOP to any message to stop receiving texts, or turn off text alerts in Settings. Reply HELP for help, or contact hello@flexshift.pro.

4. Who can see it

Your data is visible only inside your Union's workspace (enforced at the database layer). Union administrators see member management data. Platform staff access systems for support and operations under audit logging.

5. Processors

Hosting: Hetzner (app), Supabase (database & authentication). Delivery: the email provider and Twilio (SMS) configured for your Union. Payments: Stripe (Unions' billing only — member payment data is never collected). Processors receive only what delivery requires and may not use it for their own purposes.

6. Retention & deletion

Data is retained while your Union's subscription is active. Deactivated members stop receiving notifications immediately. SMS consent and opt-out records are retained as required to honor and evidence your messaging preferences. After termination, Union data is deleted within 30 days of the export window closing. Members may request deletion through their Union.

7. Security

Row-level tenant isolation, role-based access, encrypted transport (TLS) and storage at rest, audited administrative actions, and least-privilege service credentials.

8. Contact

Privacy requests: hello@flexshift.pro (RK Creative).