ShiftServer (“Service”) is a workforce scheduling platform operated by Concept One Solutions, LLC (“we,” “us,” or “our”), a Florida limited liability company. This Privacy Policy explains how we collect, use, and protect your information when you use ShiftServer.
1. Information We Collect
Account and profile information
When you register for or use ShiftServer, we collect information you provide directly, including your name, email address, mobile phone number, employment information, and any other information you choose to submit.
Usage data
We automatically collect information about how you access and use the Service, including device type, browser type, IP address, pages visited, and actions taken within the application.
Employee data
If your employer uses ShiftServer to manage scheduling, your employer (as a tenant of the Service) may provide us with employment-related information such as your job title, department, work schedule, and timecard records. This information is processed on behalf of your employer.
2. SMS / Text Message Program
ShiftServer operates an SMS notification program to deliver workforce-related alerts to opted-in employees and managers. These messages include shift assignment notifications, schedule publication alerts, time-off request decisions, shift swap updates, and shift reminders.
Opt-in: You consent to receive SMS messages by providing your mobile phone number during account registration and checking the SMS consent checkbox in the registration form, or by texting START to a ShiftServer phone number.
Message frequency: Message frequency varies based on your work schedule and the actions of your employer. You may receive up to several messages per week.
Message and data rates may apply. Standard message and data rates charged by your mobile carrier may apply to messages you send and receive.
Opt-out: You may opt out of SMS messages at any time by replying STOP to any ShiftServer text message. After opting out, you will receive one confirmation message and no further messages will be sent.
Help: Reply HELP to any ShiftServer text message for assistance, or contact us at josevargas@conceptonesolutions.com.
Mobile number non-sharing policy: We do not sell, rent, share, or otherwise disclose your mobile phone number to third parties for their own marketing purposes. Your mobile phone number is used solely to deliver ShiftServer notifications on behalf of your employer and for account-related communications. We may share your phone number with our SMS delivery provider (Twilio, Inc.) solely for the purpose of transmitting messages you have requested; Twilio’s privacy policy governs their handling of that data.
3. How We Use Your Information
- To operate, maintain, and improve the ShiftServer platform
- To deliver shift schedules, time-off decisions, and other workforce communications on behalf of your employer
- To send SMS notifications you have opted in to receive
- To authenticate your identity and maintain account security
- To respond to your support requests
- To comply with legal obligations
4. Information Sharing
We do not sell your personal information. We share information only in the following circumstances:
- Your employer: Employment and scheduling data is shared with the employer company that invited you to ShiftServer. Your employer controls and is responsible for that data.
- Service providers: We use sub-processors to operate the Service (including Supabase for data storage and Twilio for SMS delivery). These providers process data only as directed by us and under confidentiality obligations.
- Legal requirements: We may disclose information if required by law, regulation, court order, or to protect the safety or rights of ShiftServer, its users, or the public.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
5. Data Security
We implement industry-standard security measures including AES-256-GCM encryption of sensitive employee data (Social Security numbers and pay rates), row-level security on all database tables, multi-factor authentication support, and HTTPS encryption in transit. No method of electronic transmission or storage is 100% secure; we cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. Employers may request deletion of their company’s data upon account termination. We retain certain information as required by law or for legitimate business purposes.
7. Your Rights
Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal information. To exercise these rights, contact us at josevargas@conceptonesolutions.com. Employees should direct requests to their employer in the first instance, as employers control their company’s data within ShiftServer.
8. Children’s Privacy
The ShiftServer platform is intended for use by adults in an employment context. We do not knowingly collect personal information from individuals under the age of 16.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy with a revised effective date. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.
10. Contact Us
Concept One Solutions, LLC
Pensacola, Florida
Email: josevargas@conceptonesolutions.com