CrewShyft Privacy Policy

This Privacy Policy applies to the CrewShyft website, mobile applications, and related online services that support workforce scheduling and team communication for restaurants and other shift-based businesses. It is intended to serve as the public privacy policy for website visitors, businesses, managers, administrators, and workers who use CrewShyft.

In some cases, a business or employer that uses CrewShyft controls the workspace, employee roster, schedules, shift records, requests, and related workforce information in that workspace. When you use CrewShyft through your employer or another organization, that organization may determine how certain workspace data is collected, used, updated, exported, retained, or deleted.

CrewShyft is an employee scheduling, shift coordination, and team communication platform built for restaurants and other shift-based businesses. We help businesses manage schedules, staffing changes, time-off requests, shift swaps, announcements, and workforce communication across the web and mobile app experience.

Depending on how CrewShyft is used, we may collect the following categories of information:

• Account and contact information, such as names, email addresses, phone numbers, login credentials, and account preferences.
• Business and workspace information, such as business names, locations, workspace settings, organizational roles, staffing structure, and administrative configuration data.
• Employee profile details, such as display names, job assignments, role information, profile information, and other details a business chooses to maintain in CrewShyft.
• Schedule and workforce records, including shifts, assignments, availability, coverage activity, shift swaps, drop requests, pickup requests, publishing history, and related scheduling actions.
• Time-off and staffing request information, including requests, approvals, denials, comments, and related review history.
• Team communication content, such as messages, chat history, announcement board posts, replies, read status, and communication metadata needed to deliver those features.
• Device, browser, app, log, and diagnostic data, such as IP address, approximate location inferred from IP, device identifiers, browser type, operating system, app version, usage events, error logs, and performance information.
• Optional location or device-permission data if a customer enables features that rely on that information for operational, security, or notification-related purposes.
• Billing and subscription information, such as plan details, subscription status, invoice records, and limited payment-related information made available by our payment processors.
• Support and contact submissions, such as messages you send us, support history, and information you provide when requesting help or reporting an issue.

We use information we collect to operate, maintain, and improve CrewShyft, including to:

• Create accounts, authenticate users, manage access, and maintain workspace security.
• Provide scheduling, messaging, time-off, shift coordination, notification, and workforce management features.
• Enable managers and administrators to organize staffing, manage schedules, review requests, publish updates, and administer their workspaces.
• Deliver communications, announcements, reminders, alerts, and product-related messages connected to the service.
• Monitor usage, troubleshoot issues, analyze performance, and improve reliability and usability.
• Protect accounts, investigate misuse, prevent fraud, and enforce our terms and policies.
• Process subscriptions, billing workflows, invoices, and related account administration.
• Comply with legal obligations, resolve disputes, and maintain appropriate business records.

Some CrewShyft features may rely on optional device permissions, such as notifications, camera access, contacts access, or location access, depending on the feature set enabled for a workspace and the device you use. For example, a business may enable operational or security-related features that use location data to support workforce coordination, attendance-related workflows, or account protection.

If a feature requests location or another device permission, CrewShyft will generally rely on the permission controls provided by your device or browser. You can decline or revoke permissions, but some features may not function fully if you do so.

We may share information in the following circumstances:

• Within the customer organization or workspace, where managers, administrators, and workers need access to schedules, staffing updates, requests, and communications in order to use CrewShyft.
• With service providers and vendors that help us operate CrewShyft, including providers that support hosting, infrastructure, authentication, databases, analytics, logging, customer communications, support workflows, and payment processing.
• When required for legal, compliance, safety, fraud-prevention, or security reasons, including to respond to lawful requests or protect the rights, property, and safety of CrewShyft, our customers, and others.
• In connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, subject to appropriate confidentiality and legal protections.

CrewShyft uses third-party service providers to support the operation of the platform. Depending on the service, these providers may help with application hosting, cloud infrastructure, databases, authentication, analytics, logging, customer support, transactional communications, push or email delivery, and payment processing.

We share information with these providers only as reasonably necessary for them to perform services on our behalf, consistent with contractual restrictions, applicable law, and the nature of the services they provide.

We retain information for as long as reasonably necessary to provide CrewShyft, maintain customer workspaces, support legitimate business operations, comply with law, resolve disputes, enforce agreements, and protect the integrity and security of the service.

Retention periods may vary based on account status, workspace settings, business instructions, backup cycles, legal obligations, pending disputes, subscription history, and operational needs. When data is no longer needed, we take reasonable steps to delete it or de-identify it where appropriate.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information and workspace data against unauthorized access, loss, misuse, or alteration. These measures may include access controls, authentication protections, logging, monitoring, and other security practices appropriate to the nature of the service.

No method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

CrewShyft and its service providers may use cookies, local storage, session storage, and similar technologies on our website and web application. These technologies help us keep users signed in, remember preferences, maintain session continuity, improve security, understand performance, and support basic analytics and service functionality.

Your browser may allow you to control cookies or similar technologies, but disabling them may affect how parts of the service function.

Depending on your location and the applicable law, you may have rights to request access to, correction of, deletion of, restriction of, objection to, or a copy of certain personal information we maintain about you.

If you use CrewShyft through an employer, restaurant group, or other business customer, that organization may control much of the workspace data associated with your account. In those cases, you should direct requests relating to schedules, staffing records, messages, requests, or other workspace-controlled information to that organization first.

You may also contact us regarding privacy questions or requests using the contact information below. We may need to verify your identity and authority before responding.

CrewShyft is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the public service. Where local law requires a higher minimum age, we expect users to meet that higher age requirement as well.

CrewShyft may process and store information in the United States and other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction.

Where applicable, we take reasonable steps to use appropriate safeguards for cross-border data transfers.

We may update this Privacy Policy from time to time to reflect changes to CrewShyft, our practices, legal requirements, or other operational needs. When we do, we will post the updated version here and revise the “Last updated” date at the top of the policy.

If you have questions about this Privacy Policy or privacy-related requests, please contact CrewShyft at support@crewshyft.app.