1. Introduction
ShiftHarbor ("we," "our," or "us") is committed to protecting the privacy and confidentiality of our users — first responders, healthcare workers, and the agencies that support them. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
By creating an account or using ShiftHarbor, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our services.
2. Age Requirement
ShiftHarbor is intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If we become aware that a user under 18 has provided us with personal information, we will take steps to delete such information promptly.
3. Information We Collect
- Account Information: Name, email address, password (encrypted), and role (individual, agency admin).
- Profile Data: Optional information you provide such as department, years of service, and wellness preferences.
- Usage Data: Pages visited, features used, session duration, and interaction logs to improve the platform.
- Wellness Data: Mood check-ins, peer support interactions, and event RSVPs — stored securely and never sold.
- Payment Information: Processed securely through Stripe. We do not store your full card details.
4. How We Use Your Information
- To create and manage your account
- To provide peer support, wellness resources, and community features
- To send important service notifications and updates
- To process payments and manage subscriptions
- To improve platform performance and user experience
- To comply with legal obligations
5. Data Sharing & Disclosure
We do not sell your personal information. We may share data only in the following circumstances:
- Service Providers: Trusted third parties (e.g., Supabase, Stripe) that help us operate the platform under strict confidentiality agreements.
- Agency Admins: If you are part of an agency, your admin may see your account status and participation metrics — never your private wellness data.
- Legal Requirements: When required by law, court order, or to protect the safety of users or the public.
6. Data Security
We implement industry-standard security measures including encryption at rest and in transit, role-based access controls, and regular security audits. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
7. Your Rights
- Access & Portability: Request a copy of your personal data.
- Correction: Update inaccurate or incomplete information via your profile settings.
- Deletion: Request deletion of your account and associated data.
- Opt-Out: Unsubscribe from non-essential communications at any time.
To exercise these rights, contact us at privacy@shiftharbor.online.
8. Cookies
We use essential cookies to maintain your session and preferences. We do not use third-party advertising cookies. You can control cookie settings through your browser.
9. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or a prominent notice on the platform. Continued use of ShiftHarbor after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy, please contact us: