Privacy Policy

Introduction

Welcome to EpicShifts™. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our workforce management and scheduling platform.

By using EpicShifts, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our services.

Information We Collect

Account Information

When you create an account, we collect: name, email address, phone number, date of birth (optional), physical address (optional), and password (encrypted).

Organization Data

For business accounts, we collect: company name, business locations, employee information (names, contact details, positions, schedules), and organizational hierarchy.

Usage Information

We automatically collect: login times and frequency, features used and interaction patterns, IP addresses and device information, browser type and version, and session data including authentication tokens.

How We Use Your Information

We use your information to: provide and maintain our scheduling services, send transactional emails (schedule updates, notifications), authenticate your identity and prevent fraud, analyze usage patterns to improve our platform, provide customer support, comply with legal obligations, and send marketing communications (with your consent).

How We Share Your Information

We may share your information with: service providers (SMTP providers for email delivery, hosting providers for infrastructure, Cloudflare for CDN and security), business transfers (in case of merger, acquisition, or sale of assets), legal requirements (to comply with laws, court orders, or government requests), and with your consent for other purposes you explicitly approve.

We do not sell your personal information to third parties.

Data Storage and Security

Your data is stored securely using: PostgreSQL database hosted on secure cloud infrastructure, Redis cache for session and temporary data, encrypted connections (TLS/SSL) for all data transmission, multi-factor authentication (TOTP) for enhanced account security, and regular security audits and vulnerability assessments.

Data Retention: Active accounts are retained indefinitely while your account is active. Deleted accounts are retained for 30 days after deletion request, then permanently removed. Backup data is retained for 90 days for disaster recovery purposes.

Your Privacy Rights (GDPR/CCPA)

You have the right to: access your data by requesting a copy of all personal information we hold, correct inaccurate information via your profile settings, delete your account and associated data, export your data in a portable JSON format, opt-out of marketing communications (links provided in emails), and restrict processing for specific purposes. Self-service data export and deletion tools are available in your account settings on Enterprise plans. All users may exercise these rights by contacting [email protected].

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

Cookies and Tracking

We use cookies and similar technologies to: maintain your login session, remember your preferences, analyze platform usage, and improve user experience.

You can control cookies through your browser settings. Note that disabling cookies may limit some platform functionality. For detailed information, see our Cookie Policy.

Children's Privacy (COPPA)

EpicShifts is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at [email protected], and we will delete that information promptly.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws, including GDPR for EU residents.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by: posting the updated policy on this page with a new "Last Updated" date, sending an email notification to your registered email address (for significant changes), and displaying a prominent notice on our platform.

Your continued use of EpicShifts after any changes constitutes acceptance of the updated Privacy Policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: [email protected]
Mail: EpicShifts LLC, Sioux Falls, SD

We are committed to resolving any privacy concerns you may have and will respond to your inquiry within 30 days.