Privacy Policy

Shift Fill Express ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our automated shift coverage service.

1. Information We Collect

1.1 Information You Provide

• Account Information: Business name, contact name, email address, phone number
• Employee Information: Names, phone numbers, job roles, availability schedules
• Business Information: Industry type, number of employees, scheduling system used
• Communication Data: Call logs, shift coverage confirmations, system notifications

1.2 Information Collected Automatically

• Usage Data: Service usage patterns, feature utilization, system performance metrics
• Technical Data: IP addresses, browser types, access times, referring pages
• Call Data: Call duration, response rates, coverage success metrics (anonymized)

2. How We Use Your Information

We use collected information to:

• Provide and maintain our shift coverage service
• Process shift coverage requests and notifications
• Communicate with you about service updates and issues
• Improve our service performance and features
• Ensure compliance with applicable laws and regulations
• Prevent fraud and enhance security
• Provide customer support

3. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information:

• With Service Providers: Third-party vendors who assist in operating our service (e.g., Twilio for phone services)
• For Legal Requirements: When required by law or to respond to legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Consent: When you explicitly agree to sharing

4. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication requirements
• Employee training on data protection

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Typical retention periods:

• Active account data: Duration of service agreement plus 30 days
• Call logs: 90 days
• System logs: 30 days
• Backup data: 90 days

6. Your Rights and Choices

You have the right to:

• Access and receive a copy of your personal information
• Update or correct inaccurate information
• Request deletion of your information (subject to legal requirements)
• Opt-out of non-essential communications
• Request data portability where applicable

To exercise these rights, contact us using the information below.

7. Healthcare Compliance (HIPAA)

For healthcare clients, we maintain HIPAA compliance through:

• Business Associate Agreements (BAAs) where required
• Limited collection of Protected Health Information (PHI)
• Appropriate safeguards for any healthcare-related data
• Employee training on HIPAA requirements

8. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any changes by:

• Posting the new policy on this page
• Updating the "Effective Date" at the top
• Sending an email notification for material changes

10. Contact Information

11. State-Specific Rights

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to:

• Know what personal information is collected
• Request deletion of personal information
• Opt-out of the sale of personal information (we do not sell data)
• Non-discrimination for exercising privacy rights