ShiftSurge
← Back to Home

Privacy Policy

Last Updated: February 5, 2026

ShiftSurge ("we," "us," or "our") operates a platform connecting hospitality professionals with exclusive promotions and job opportunities. This Privacy Policy explains how we collect, use, and share your personal information.

1. Information We Collect

1.1 Information You Provide

  • Name, email address, phone number, and date of birth
  • Role (worker or restaurant manager) and position in the industry
  • Restaurant name, address, and business details (for restaurant accounts)
  • Profile photos and content you upload
  • Communications you send to us through support or feedback forms

1.2 Automatically Collected Information

  • Device information (model, operating system, unique device identifiers)
  • Log data (IP address, browser type, access times, pages viewed)
  • Usage analytics (feature engagement, session duration, crash reports)

1.3 Location Data

  • We may collect your precise location when you enable location services
  • Location data helps us show you relevant nearby promotions and job postings
  • Background location collection may occur to provide distance-based features and proximity alerts
  • You can disable location sharing at any time in Settings

1.4 Push Notifications

  • If you opt in, we send push notifications about new nearby promotions, application status, and account activity
  • We use Firebase Cloud Messaging (Android) and the Web Push Protocol (browsers) to deliver notifications
  • You can disable notifications at any time from your device or from in-app Settings

1.5 Payment Information

  • For restaurant accounts, payment information is collected and processed by Stripe, our PCI-compliant payment processor
  • We never see or store your full card number or CVV
  • We retain only the last 4 digits and card brand for receipts and fraud prevention

1.6 Usage Data

  • Promotions viewed, liked, claimed, and redeemed
  • Job applications submitted and application status
  • Search queries and filters applied
  • Device information and push notification delivery results

2. How We Use Information

  • Provide and personalize our services
  • Show relevant promotions and job postings based on your location and role
  • Send push notifications about new promotions and updates
  • Process promotion claims and redemptions
  • Communicate about your account and our services

3. How We Share Information

  • With restaurants when you claim or redeem promotions
  • With restaurants when you apply for job postings
  • Aggregated, de-identified data for analytics and insights
  • As required by law or to protect our rights

4. Aggregated & De-Identified Insights

We provide restaurant managers with aggregated analytics about promotion performance, demographics of engaged workers, and peak activity windows. This data is de-identified and reported only in aggregate counts and bucketed ranges so that no individual worker can be identified or singled out from any report we generate.

We may also use aggregated, de-identified data to improve our services, publish research, or share industry trends with partners.

5. Data Storage, Security & Sub-Processors

We use industry-standard security measures to protect your data, including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews.

Our services are hosted on AWS and Hetzner. We rely on the following sub-processors to deliver core functionality:

  • Stripe — payment processing (we do not store your card information)
  • Google Firebase Cloud Messaging — mobile push notifications
  • Supabase — authentication and database hosting
  • Sentry — error tracking and diagnostics
  • Nylas / Google Calendar — calendar sync for promotions (optional)
  • Google Places API — restaurant ratings and hours

6. Cookies & Similar Technologies

We use session cookies to maintain your login state and preferences. We do not use third-party advertising cookies.

7. Children's Privacy

ShiftSurge is not intended for users under 18 years of age. We do not knowingly collect information from minors.

8. Your Choices

  • You can update or delete your account at any time in Settings
  • You can enable or disable location tracking
  • You can manage push notification preferences
  • You can request a copy of your data by contacting us

9. International Users

ShiftSurge is based in the United States. By using our services, you consent to the transfer and processing of your data in the United States.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via email or in-app notification.

11. Contact Us

If you have questions about this Privacy Policy, contact us at info@shiftsurge.com.