Privacy Policy

Who is responsible

For information about a restaurant's team (schedules, availability, pay rates, training), the restaurant decides what is entered and why, and ShiftNivo processes it on the restaurant's behalf. If you work at a restaurant that uses ShiftNivo, your employer is your first contact; we will help them answer you.

For our own account holders, the people who contact us and visitors to this website, ShiftNivo decides. The person in charge of protecting personal information at ShiftNivo can be reached at hello@shiftnivo.com.

What we collect

• Account details: name, email address, language, and a password, which our sign-in provider stores only as a hash.
• Workplace information entered by a restaurant or by the person themselves: name, email, phone number, birth date (used to apply youth labor rules), roles, pay rate or salary, availability, time off, shifts and their history, requests, training progress and quiz results, agreements signed with a typed name, certificates and the photos or PDFs uploaded for them, an emergency contact, announcements and whether they were read.
• From the iPhone app: a notification token so the app can be sent notifications. Shift reminders, the phone calendar and the Lock Screen widget are worked out on the phone; that information is not sent to us.
• Your notification choices, set in the app or on the web: which notices reach your phone or your email, and any quiet hours, with the time zone they are read in.
• From this website: what you choose to send through the get-started form (name, email, restaurant, region and team size). No tracking cookies.
• Technical records: server logs with IP addresses and requests, and error reports with personal details removed where we can.

How it is used

• To run the Service: building and publishing schedules, telling people about their week, checking labor rules, training and certificates.
• To keep it secure, fix faults and answer support requests.
• To meet legal obligations.

Pay rates are shown only to the people a restaurant allows to see them, and are never sent to a staff member's screen. A phone number is shown to colleagues only if its owner turns that on. We do not use workplace information for advertising or to train artificial intelligence models.

Who processes it, and where

We use these service providers. Each receives only what it needs for its part of the Service:

• Supabase: the database, sign-in and uploaded certificate files. Canada (Montréal).
• Render: runs the web application. United States (Virginia).
• Cloudflare: hosts this website and routes email sent to our addresses. Global network.
• Resend: sends the emails the product writes (invitations, schedules, decisions). United States.
• Sentry: receives error reports, with personal details removed where we can. United States.
• Expo: delivers notifications to the iPhone app. United States.
• Apple: delivers notifications to iPhones and distributes the app. United States.
• GitHub: stores the nightly encrypted backup of the database. United States.

Your information may therefore be stored and processed outside your province, state or country, in Canada and the United States, where it may be accessible to authorities under local law. We share information otherwise only when the law requires it.

How long we keep it

Workplace information is kept while the restaurant's workspace is open. When a workspace is closed it is deleted within 30 days, and encrypted backups expire within a further 30 days, except where the law requires a record to be kept longer. Get-started form entries are kept until you ask us to delete them, or for two years at most.

Security

Connections are encrypted, each workspace's data is separated by checks on every request, pay data sits behind its own permission, backups are encrypted, and error reports are scrubbed of personal details. No system is perfectly secure; if a breach puts you at risk, we will tell you and the authorities as the law requires.

Your rights

You may ask to see the personal information we hold about you, to correct it, to have it deleted, or to withdraw a consent you gave. Write to hello@shiftnivo.com; we answer within 30 days. If you work at a restaurant that uses ShiftNivo, you can also ask your employer, who can change most of it directly.

You can delete your own login at any time from the iPhone app: Profile, then Login and security, then Delete my login. That removes the account, your notification tokens and notification choices, your calendar link and the contact details you entered yourself. The restaurant's own records about your work, such as shifts, training and certificates, are its records and stay with it.

You may also complain to a privacy regulator, such as the Office of the Privacy Commissioner of Canada, Québec's Commission d'accès à l'information, or the authority where you live. Residents of US states with privacy laws, such as California, have the rights those laws give them.

Young workers

ShiftNivo is a workplace tool, not a service for children. Restaurants may schedule employees under 18 where the law allows, and enter their birth dates so the youth hour and curfew rules can be checked. We do not knowingly collect information from children under 13.

Changes

When this policy changes, the date at the top changes. If a change matters to how your information is used, we will tell account holders by email before it takes effect.