Privacy policy (draft)

Draft — pending legal review. This describes how the site works today and may change before public launch.

Your account

We store your email address, a securely hashed password and your account role. You must confirm your email before you can submit reviews or use the earnings tracker. A confirmed email is never treated as proof of employment.

Workplace reviews

Reviews are screened for obvious identifiers (such as emails, phone numbers, links, social handles and possible names) and checked by a moderator before appearing. Published reviews show ratings, review text and the month the review was approved by a moderator (not when you worked there). Your role is shown only when at least 3 approved reviews for the same restaurant share it; otherwise it reads "Team member". Tenure, earnings and account details are never shown with reviews. Automated screening cannot catch everything, so please leave out details that could identify you or anyone else.

Earnings figures you include with a workplace review are private to you and our moderator and are never published individually.

Private earnings tracker

Shifts, workplaces, goals and notes you enter in My Earnings are private to you. They are not shared with restaurants, other users or the public, and administrators have no routine access to them.

Voluntary earnings transparency

You can choose, separately, to include existing shifts (one by one or all at once) and future shifts in anonymous aggregate earnings insights. Both are off by default. Only shifts at listed restaurants can be included; private workplaces never count. This choice is separate from any consent given with a workplace review.

A shift only becomes eligible seven full days after the latest of its shift date, when you selected it, or when you last changed its earnings details. Changing those details or your selection restarts the delay.

Withdrawal: you can withdraw any shift at any time. Withdrawn shifts are removed from future calculations and any affected internal results are discarded. If insights are published in the future, withdrawing cannot take back figures that others have already seen.

How aggregation protects you

Any figures would combine at least 10 eligible contributors, each counted once, with additional checks that hide groups where one or two people dominate or where comparing releases could reveal an individual. Figures would be rounded and shown as ranges. Internal results are prepared monthly and are not publicly available. No earnings insights are published today.

Deleting your account

Your sign-in, email address, account role, workplace reviews (including published ones), earnings submissions, private tracker records and transparency choices are permanently deleted.

We keep one minimal security record: your former internal account ID, the deletion date, and the number of submissions removed. It contains no email address, review text or earnings figures, is kept to detect abuse such as repeated account creation and deletion, and is automatically deleted after 90 days. This retention period is provisional.

Security and service providers

Data is stored with our hosting and database providers, who process it on our behalf. Access is restricted by account permissions, and administrative actions are recorded in an internal audit log. We do not sell your data. We never ask for Social Security numbers, bank details or unredacted payroll documents.

Contact

For privacy questions, email hello@shiftverified.com. You can also view and delete your data at any time from your account dashboard.