Last Updated: April 30, 2024

Welcome to Fullshift, a Software-as-a-Service (SaaS) platform dedicated to optimizing employee scheduling and management. We are committed to the privacy and security of your information. This Privacy Policy outlines how we collect, use, disclose, and protect the data collected through our platform, including data accessed via Google OAuth services.

1. Information We Collect

• Company Information: We collect company name, location, and contact details to set up and manage accounts.
• Owner Information: Owner details are collected for account registration and management.
• Employee and Staff Information: We collect names, contact information, and shift preferences of employees and staff necessary for managing schedules.

2. How We Use Your Information

• Employee Scheduling: Information is used to create, modify, and communicate work schedules.
• Shift Management: We facilitate shift switches, cancellations, and manage call-ins.
• Account Registration and Authentication: We use Google OAuth to simplify the sign-up and sign-in process for business owners, aligning with Google's user data policies.

3. Google OAuth and User Data

• Data Access via Google: When you use Google OAuth, we access your Google profile information, including your name and email address, solely to authenticate you and link your Google profile to your Fullshift account.
• Data Usage: We use your Google data only for authentication purposes and do not share this information with any third parties outside of necessary legal requirements or explicit consent.

4. Data Security

• Encryption: We employ industry-standard encryption technologies during data transmission and storage, including AES-256 encryption, to secure your personal information.
• Confidentiality: Information collected is treated as confidential, with access restricted to authorized personnel only.
• Access Controls: Stringent access controls are implemented to ensure only authorized personnel can access user data.

5. Third-Party Services

• Scope of Data Sharing: The only third-party service we use in connection with Google services is Google OAuth. No other third-party has access to your Google data through our platform.

6. Data Retention

• Retention Period: We retain personal data only as long as necessary to fulfill the purposes outlined herein or as required by law. This period is determined by operational necessity and legal requirements.

7. Your Rights

• Access, Correction, and Deletion: You have the right to access, correct, or delete your personal information. Requests can be made via our support team at support@fullshift.day.
• Consent: You can withdraw consent to data use at any time by deleting your account or contacting our support team.

8. Policy Updates

• Notification of Changes: Any changes to our privacy policy will be communicated through updates on our website and, if significant, through a notification via email or within the service.

9. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at support@fullshift.day.

By using Fullshift, you agree to the terms outlined in this Privacy Policy. We encourage you to review this policy regularly to stay informed about how we collect, use, and protect your information.