1. Introduction
This Privacy Policy explains how Digital Elegance LLC d/b/a WDWShiftX (“WDWShiftX,” “we,” “us,” or “our”) collects, uses, and shares information about you when you use our shift coordination platform (“the Service”).
If you have questions or requests regarding your privacy, contact us at support@wdwshiftx.com.
2. Information We Collect
A. Information You Provide Directly
- Account information: Display name, email address, and hashed password when you register
- Profile information: Phone number (optional), notification preferences, time zone, date and time format preferences
- Shift and request data: Shift offers and requests you post, including dates, times, shift titles, and details
- Communications: Comments, direct messages you exchange with other board members (including any reactions and read status), and flags submitted through the platform
- OAuth information: If you sign in via Google, Facebook, or LinkedIn, we receive your name and email address from that provider
- Support communications: Messages you send to our support team
B. Information Collected Automatically
When you use the Service, we and our service providers automatically collect:
- Log data: IP address, browser type and version, pages visited, timestamps, referring URLs, and error logs
- Device information: Device type, operating system, and browser settings
- Usage data: Features you use, actions you take, and time spent on the Service
- Cookies and similar technologies: Session identifiers and functional cookies needed to keep you logged in (see Section 6)
3. How We Use Your Information
We use your information for the following purposes:
- To create and manage your account and provide the Service
- To display your shift posts and profile information to other approved members of your boards
- To send transactional emails (email verification, password reset, board approval notifications, calendar sync)
- To moderate the platform, investigate reports, and enforce our Terms of Service
- To detect, prevent, and respond to fraud, abuse, and security incidents
- To respond to your support requests and communications
- To comply with our legal obligations
We do not use your information for advertising, sell it to data brokers, or share it for third-party marketing purposes.
4. Information Sharing & Disclosure
We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:
Within the Platform
- Your display name and shift posts are visible to all approved members of the boards you belong to
- Your direct messages are visible only to the other participant in that conversation. They are not visible to other board members or board moderators. Messages are stored on our servers so conversations sync across your devices, and may be reviewed by WDWShiftX when investigating a flag, abuse report, or suspected violation of our Terms of Service
- Deleting a chat removes it from your view only — the other participant retains their copy of the conversation
- Your display name is associated with your comments, flags, and interest marks as visible to moderators and post owners
Service Providers
We share data with third-party service providers who assist us in operating the Service. These providers are contractually bound to use your data only as directed by us and to maintain appropriate security. See Section 5 for a full list.
Legal Requirements
We may disclose your information if required to do so by law, subpoena, court order, or other governmental authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of WDWShiftX, our users, or the public.
5. Third-Party Service Providers
We use the following third-party services. Each processes your data in accordance with their own privacy policies:
- Supabase (supabase.com) — database hosting, authentication, and real-time data sync. Data stored on AWS infrastructure in the United States.
- Vercel (vercel.com) — application hosting and content delivery.
- Resend (resend.com) — transactional email delivery (verification, password reset, board notifications).
- Google (google.com) — optional OAuth sign-in and calendar sync. If used, Google shares your name and email with us.
- Facebook / Meta (meta.com) — optional OAuth sign-in. If used, Meta shares your name and email with us.
- LinkedIn (linkedin.com) — optional OAuth sign-in. If used, LinkedIn shares your name and email with us.
6. Cookies & Similar Technologies
We use the following types of cookies:
- Session cookies: Required to keep you logged in while you use the Service. These are deleted when you close your browser or log out.
- Preference cookies: Store your display preferences (dark mode, time format, timezone) locally on your device.
- Security cookies: Used to detect and prevent fraud and unauthorized access.
We do not use tracking pixels, cross-site tracking, or advertising cookies. You can instruct your browser to refuse all cookies; however, some features of the Service may not function properly without cookies.
7. Data Security
We implement industry-standard technical and organizational measures to protect your personal information, including:
- Encrypted connections (HTTPS/TLS) for all data in transit
- Passwords stored using bcrypt hashing — never in plain text
- Row-level security (RLS) policies on our database ensuring users can only access data they are authorized to see
- Access controls limiting staff access to personal data on a need-to-know basis
No system is completely secure. We cannot guarantee absolute security of your information. If you believe your account has been compromised, contact us immediately at support@wdwshiftx.com.
8. Data Retention
We retain your information for the following periods:
- Account and profile data: Retained while your account is active and for up to 30 days after you request deletion or deactivate your account
- Shift and request posts: Deleted immediately upon account deactivation; expired posts are archived for up to 90 days before permanent deletion
- Server log files: Retained for up to 90 days
- Support communications: Retained for up to 2 years after your last interaction
Upon verified deletion, all personal data is permanently removed within 30 days. Anonymized, aggregated statistics (such as total post counts) that cannot be linked back to you may be retained indefinitely.
9. Your Rights & Choices
Regardless of where you live, you have the right to:
- Access: Request a copy of the personal information we hold about you
- Correct: Update inaccurate information through your Profile page or by contacting us
- Delete: Request deletion of your account and personal data (see our Data Deletion page)
- Opt out of email notifications: Adjust notification preferences in your profile settings
To exercise any of these rights, contact us at support@wdwshiftx.com. We will respond within 30 days. We may need to verify your identity before processing your request.
10. Children's Privacy
The Service is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we discover that a user under 18 has created an account, we will promptly delete their account and all associated data.
11. Changes to This Policy
We may update this Privacy Policy periodically. When we make material changes, we will notify you by email to the address associated with your account before the changes take effect, and we will update the “Last updated” date at the top of this page.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at support@wdwshiftx.com. We will respond to all privacy requests within 30 days.