This policy describes how Shift Exchange handles personal information through Shift Exchange at https://shifts.unioncontractai.com, including account administration and related support. The Service is intended for adults at enrolled U.S. workplaces. Contact UnionContractAI@outlook.com with privacy questions or requests. Postal address: Shift Exchange, [registered business address to be added].
Summary. We use information to provide and secure a worker-only shift exchange and communications service. We do not sell personal information, use it for targeted advertising, or provide an employer dashboard or routine member-data feed. Members, service providers, and authorized operators have the access described below. A members-only service cannot guarantee secrecy from recipients, employer-controlled devices, or lawful legal process.
1. Who is responsible
Shift Exchange operates the Service and determines its information practices. We are independent of your employer and union. Member administrators have limited permissions to manage their workplace within the Service; that role does not give them general access to all information.
2. Information and sources
We receive information from you, members who interact with you, member administrators, your browser or device, and the providers that operate authentication, hosting, communications, and payments.
Account and workplace information: first and last name, email address, employee number, workplace, account status, invitation and approval information, bid line, classification, work area, account identifiers, and changes to these details. Administrators may supply or correct workplace details. We also receive information you voluntarily provide when requesting support or verification. Do not submit Social Security numbers, government identification documents, or unrelated personnel records through ordinary support messages.
Authentication: passwords and verification information are processed to sign you in and secure your account. Our application transmits credentials to our authentication provider, which maintains password hashes and authentication records. We do not intentionally retain plaintext passwords. Where enabled, authentication also involves multifactor enrollment, verification, and recovery information. Do not send passwords or sign-in codes to support.
Trades and communications: shifts posted, claimed, released, or swapped; dates, times, participants, and comments; member messages; room posts, questions, replies, and resolution marks; abuse reports and associated information; feedback; and correspondence with support. Information in messages may concern other people as well as you.
Preferences and activity: watched areas and shifts, alert settings, room notification choices, read or last-opened markers, notifications generated and delivery status, and a coarse last-active hour used to help administrators manage membership. The application updates that presence value at most once per hour. That limit does not describe the separate request and authentication logs maintained by providers.
Device and technical information: push-subscription endpoints and associated encryption keys for enabled devices; IP addresses, browser or user-agent information, request timestamps, and diagnostic or security information processed by hosting and authentication infrastructure. Push endpoints are issued through your browser's push service. We do not use these records to build advertising profiles.
Agreement records: when you accept legal documents, we retain your account identifier, date and time, IP address and forwarded-address information, browser user agent, checkbox responses, button label, page path, document versions and hashes, and a snapshot of your name, email address, and employee number as certified. These identifying records are stored separately from your active profile and may survive account deletion.
Administrator records: we record administrative actions, including who acted, affected account or record identifiers, the workplace, time, action, and relevant non-content changes. Audit records omit the text of room posts and messages and avoid copying changed names, contact information, employee numbers, and photos. Internal identifiers can still be personal information and can remain linkable through other retained records. Administrative security alerts and summaries may also be processed through hosting logs and delivered to the operator.
Payments: if you subscribe, we receive payment-provider customer and subscription identifiers, plan and subscription status, billing-period information, and transaction or billing information needed to administer purchases and resolve issues. Full card details are handled by the payment provider; we do not store full card numbers in the application.
3. Cookies, tracking, and optional information
We use cookies and similar storage to authenticate users, maintain sessions, support security, limit last-active updates, and recognize acceptance of the current legal documents. Blocking necessary cookies may prevent the Service from working.
Visits to the public pages: the pages anyone can read without signing in, the front page and the guides, count their own visits. Each count records which of those pages was opened, the name of the website that linked to it (not the address of the linking page), and whether the "Get the app" or "Join your crew" button was tapped, including which installation steps were shown. The Service makes these counts itself and keeps them in our hosting provider's logs (section 7). They use no cookie or device storage, and no IP address, browser identifier, account, or other identifier is recorded with a count, whether or not you are signed in. As with every request, the hosting provider's own request logs described in section 2 still record the connection. Browsers that identify themselves as automated are not counted. We use these counts only as totals, to learn whether people find and install the Service.
We do not deploy advertising pixels, third-party behavioral analytics, session-replay tools, or advertising fingerprinting in the Service. We do not buy personal information or collect precise device location through a location permission. An IP address can indicate an approximate location. We do not access your device address book, photo library, or calendar merely because you use the Service; information you choose to send to us is still collected.
We do not track users across unrelated websites for advertising or permit advertising networks to do so through integrations in the Service. Our practices do not change in response to a browser Do Not Track signal because we do not conduct that tracking. We do not sell information, share it for cross-context behavioral advertising, or use targeted advertising, whether or not a Global Privacy Control signal is enabled. If a practice requiring an opt-out signal response is introduced, we will first provide required notice and implement the required controls.
External websites you choose to visit, including a payment provider's own pages, operate under their own notices and may use their own cookies.
4. Sensitive information
An account at a union-represented workplace does not necessarily establish union membership. Nevertheless, account details or messages may reveal union affiliation, private communications, health information, or other information treated as sensitive under applicable state law. Account credentials also require particular protection.
We use sensitive information only as reasonably necessary for the purposes described in this policy and permitted by applicable law, including providing requested features, account security, responding to abuse, and complying with legal obligations. We do not sell it, use it for advertising, or use member content to train machine-learning models. Where applicable law requires separate consent for processing sensitive information, we must obtain that consent before the relevant processing; acceptance of general terms is not a substitute.
Avoid including medical details or other highly sensitive information in a shift listing or room. A simple statement that a shift is available is usually enough. Do not submit someone else's sensitive information without a lawful basis.
5. Purposes
We use the information described above to create and authenticate accounts; verify eligibility; apply workplace and qualification settings; operate trades, messages, and rooms; deliver requested alerts; manage subscriptions; provide support; enforce access and content rules; investigate misuse; diagnose and secure the Service; document consent and agreements; comply with legal obligations; and establish, exercise, or defend legal claims.
We do not make employment decisions or use personal information for automated decisions producing legal or similarly significant effects. Software filters which shifts are displayed using workplace settings; this does not determine an employer's approval or anyone's legal eligibility for a job.
6. Member, administrator, and operator access
Other members: members at your workplace can see identifying information associated with trades and messages they are permitted to access, such as your name, shift details, and posts. They do not receive your employee number, email address, or private alert settings through ordinary member views. A direct message is available to its participants, subject to operator and provider access below.
Rooms: workplace rooms are available to approved members at that workplace. System-wide rooms are available to approved members at workplaces of the same employer and display posts with first name, last-name initial, and workplace. What you write can disclose more about you than those displayed fields. Recipients may retain screenshots or copies outside our control.
Member administrators: authorized administrators can view their workplace's member roster, including names, employee numbers, account status, bid lines, and coarse presence information; review trade records; read feedback that members at their workplace send through the Service, displayed with the sender's name and employee number; and use workplace activity summaries. Their administrator trade access is read-only. They do not have a routine view of private member-to-member messages. They can moderate rooms they are authorized to access. The reporting interface shows the reported message and reason, but does not display the reporter's identity to member administrators; the circumstances or report text may nevertheless identify someone.
Only the operator controls administrator permissions and designated posters for restricted rooms. Member administrators cannot read the underlying administrative audit record through the Service. Workplace and room access restrictions are enforced through database access policies, but no access-control system can guarantee that unauthorized access will never occur.
Operators and providers: authorized operators and technical providers can access underlying records, including messages where necessary, to provide, maintain, secure, and support the Service, handle reports, fulfill legal duties, and address disputes. Private messages are stored so that the Service can deliver them; they are not represented as end-to-end encrypted against the operator. Routine message delivery necessarily involves automated processing. We do not routinely read private conversations for unrelated purposes.
Employers and unions: we do not provide employers an account, dashboard, reporting export, or routine member-data feed, and do not voluntarily supply member information for workforce monitoring. If a union local sponsors the Service, its ordinary reporting is limited to aggregate activity totals, not individual member records. A union representative who is also an eligible member or administrator may see information available in that role. Legal disclosures are addressed in section 11. We cannot prevent an employer from accessing its own managed email accounts, devices, or networks, or receiving information independently from a member.
7. Providers and other disclosures
Providers supporting the Service include:
- Supabase: database, authentication, and file storage.
- Google Cloud Run and related Google Cloud services: application hosting, operational logs, monitoring, and security alerts.
- Stripe: subscription payments and billing administration, if you subscribe.
- Resend: transactional and enabled alert email delivery.
- Apple, Google, and Mozilla push services: browser or device push delivery, depending on your device.
We disclose information needed for these functions. Where providers process information on our behalf, their processing is subject to applicable service agreements and data-protection terms. Some providers, especially payment providers, also process information for their own legal, security, fraud-prevention, and service-administration purposes under their own privacy notices. Encryption of a push payload does not hide delivery metadata from a push provider. Room push payloads identify a room without including the author's name or message text.
We may disclose limited information to professional advisers under confidentiality obligations, in the circumstances in section 11, or at your direction. In a merger, reorganization, financing, or transfer of the Service, information may be reviewed or transferred subject to appropriate confidentiality safeguards, applicable law, and existing privacy commitments. Such a transaction is not permission to disregard those commitments or supply information for employer surveillance. We will provide legally required notice and obtain consent when required.
We will update this policy when provider changes materially affect the practices described here. Links or integrations with separate services do not make their independent practices ours.
8. Retention and deletion
Retention depends on the record's purpose, account status, commitments to other participants, security needs, and applicable legal requirements. We keep information only as reasonably necessary for those purposes, subject to applicable law. Retention is not a promise that a record will always be available to you.
- Active accounts and ordinary content: generally retained while the account is open, subject to deletion requests and the room schedules below.
- Room messages: the configured limits are 30 days for General Chat, Tools Lost and Found, Classified, and system-wide General Discussion, and 90 days for Contract Discussion rooms. Need Help and official rooms retain posts while the room exists. Custom rooms show their own setting. Scheduled automatic deletion is configured to begin on December 18, 2026; before then messages are retained unless separately removed. Thereafter, the scheduled cleanup removes messages older than the applicable limit, including messages hidden by moderation, subject to failures requiring correction and lawful preservation requirements.
- Account deletion: requests currently are handled manually through UnionContractAI@outlook.com. After verification, we delete or deidentify information subject to the request, except records we are legally permitted or required to retain, such as necessary transaction history, security records, agreement evidence, or material subject to a legal hold. We explain material exceptions in our response. Removing a profile alone does not erase separate acceptance or audit records, recipients' copies, or all references in a conversation.
- Acceptance records: retained during the account relationship and for at least three years after it ends for agreement evidence and dispute handling, with any longer retention limited to a documented legal or evidentiary need. These records include the identity snapshot described in section 2.
- Administrative audit records: retained while the workplace uses the Service and as needed afterward for security investigations, legal obligations, or disputes. They are protected against ordinary editing or deletion through the Service. An account identifier is not automatically anonymous merely because a profile is deleted.
- Billing records: generally retained for seven years for accounting, tax administration, and dispute handling, subject to any different applicable legal requirement. Seven years is a retention practice, not a statement that every tax record legally requires that period.
- Provider logs and backups: retained according to the relevant provider's configured retention, recovery, and legal requirements. They may persist after information is deleted from active application records. Backup copies are not used to restore an intentionally deleted account for ordinary use; if a recovery restores deleted information, deletion requests must be reapplied, subject to lawful exceptions.
We may preserve relevant records longer when required by law or reasonably necessary for a pending dispute, investigation, or legal claim. This is not permission to keep all account content indefinitely. Ask UnionContractAI@outlook.com about retention for a particular record.
9. Choices and privacy requests
You can manage available profile and notification settings in the Service. Contact us for corrections that are not self-service. You can revoke push permission in your browser or device settings.
Depending on your state and the law's applicability, you may have rights to confirm processing; access or obtain a portable copy; correct or delete information; limit or withdraw consent to certain sensitive-data processing; opt out of sales, targeted advertising, or certain profiling; and appeal a denial. We do not engage in the sale, advertising, or significant-decision profiling described above. These rights are subject to lawful exceptions, including protecting another person's privacy and preserving required records.
Submit a request to UnionContractAI@outlook.com with a description of what you want and enough information to identify your account. Do not send your password, payment-card number, or government identification in ordinary email. We may verify identity and authority using proportionate information. An authorized agent may submit a request; we may require proof of authority and, where permitted, verification with you.
We will respond within the period required by applicable law, generally within 45 days for access, correction, and deletion requests. If a permitted extension is necessary, we will give notice and reasons within the original period. Shorter deadlines for particular rights still apply. If we deny a request, we will explain the basis unless prohibited by law. To appeal, email UnionContractAI@outlook.com with "Privacy Appeal" and identify the decision; we will explain our response and any applicable route to the relevant state attorney general or regulator within the legally required period. You may complain to your state's regulator at any time. We do not unlawfully discriminate against people who exercise privacy rights.
10. Security
We use technical and organizational safeguards designed to protect information, including encrypted transport, database access policies, restricted operator access, authentication controls, and administrative audit records. No service can guarantee complete security or prevent every disclosure by a recipient. Protect your own account and report suspected misuse to UnionContractAI@outlook.com.
If an incident triggers notification duties, we will notify affected individuals and authorities within the applicable legal deadlines and with the required information. This policy does not waive statutory security or breach-notification duties.
11. Legal and safety disclosures
We may preserve or disclose information when required by valid legal process or applicable law, or when otherwise permitted by law and reasonably necessary to address fraud, protect rights, establish or defend legal claims, or respond to a serious threat to safety. Access to and disclosure of communications are also subject to laws governing stored communications; this paragraph is not blanket consent to otherwise prohibited disclosure.
We review demands for legal validity and scope and limit disclosures to what is legally required or justified by the specific lawful purpose. Where lawful and reasonably practicable, we will notify an affected member of a demand before disclosure so the member may seek protection. Advance notice may be prohibited, impracticable in an emergency, or inappropriate where it would compromise a lawful investigation. We may object to improper demands; we do not promise to litigate every demand or guarantee confidentiality against a valid order.
12. Children
The Service is for people age 18 and older and is not directed to children. We do not knowingly allow accounts for minors. If you believe a minor has provided information, contact UnionContractAI@outlook.com. When we learn of an underage account, we will restrict access and delete information as required by applicable law, retaining only what the law permits or requires for protective or legal purposes.
13. Location of processing
We operate in the United States and use U.S.-based application and database hosting. Providers may process certain billing, support, security, or delivery information in other locations under their service arrangements. This is not a promise that every copy or every provider operation stays in the United States. Use from abroad may involve transfers to the United States. The Service is offered for U.S. workplaces and does not invite enrollment at workplaces outside the United States.
14. Changes
We update the date and version when this policy changes and provide notice of material changes through the Service or another appropriate channel. Our current acceptance flow asks members to acknowledge the updated documents before continuing to use member features. That acknowledgment does not replace any separate consent required by law. We will not materially expand use of previously collected information inconsistently with the commitments under which it was collected without the notice and consent required by applicable law. You may exercise privacy rights or request cancellation without accepting an update.
15. Contact
Privacy questions, requests, and appeals: UnionContractAI@outlook.com. Postal address: Shift Exchange, [registered business address to be added].