SnellShifts Privacy Notice

1. Information we collect

We collect account identifiers, email and Supabase authentication data, display name, role, country, language and currency. Worker profiles include skills, biography, radius, availability and email preferences. Jobs include task text, general area, optional budget, requested time, expiry and a private location you provide. We store responses, selections, notifications and email-attempt records.

Our hosting and authentication providers process technical information such as IP address, browser/device information, request times and security events to deliver and protect the service. Our application authentication limiter stores keyed hashes of IP addresses and, for email/password attempts, email addresses rather than the raw values in its counter table. Support correspondence includes information you choose to send us. Do not send passwords, identity documents, bank information or unnecessary sensitive details by email or in public listings.

2. Google sign-in

Google sign-in is optional; email/password access remains available. If you choose Google, we request only OpenID identity, your primary email address and basic profile information such as your name and profile picture. Supabase receives and validates Google authentication information, links it to a directory account and manages your session. A picture or other Google profile metadata may be held in authentication metadata; the current directory does not publish your Google email address or profile picture on worker cards.

We use Google information to authenticate you, establish and maintain your account, populate your display name and protect account access. We do not request Gmail, Drive, Calendar, contacts or other Google API access. We do not sell Google user data, use it for advertising, or use it to train general-purpose AI models. You can disconnect SnellShifts through your Google Account connections settings. Disconnecting Google does not itself delete your directory account or its existing information; contact us to request deletion.

3. How and why we use information

We use information to operate accounts, publish worker profiles, match jobs by skills and distance, show responses to the posting customer and notify eligible workers. Optional email job alerts can be switched off; in-app notifications remain. We do not hire workers, set job prices or collect job payments.

Where applicable law requires a legal basis, account and listing operations support the service you request; security and abuse prevention support our legitimate interests, subject to your rights; required records may be kept to meet legal obligations. Optional location and Google sign-in are used at your direction and, where required, with your consent. You may stop providing optional information and remove your saved location through your profile.

4. Public information and private location

Completed worker profiles publish display name, country, language, currency, skills, biography, current availability and awarded badges. Their URLs include an account identifier. Jobs are shown to their owner and matching authenticated workers, including category, description, general area, requested time, budget, currency and status. Workers who responded retain access to that job’s status; they do not see other workers’ responses. The posting customer can see responder names, skills, badges, distance bands, messages and status. Worker public profiles may be copied or indexed by others.

Exact profile and job coordinates, account emails and phone numbers are not returned by matching projections. Distances use a location snapped to a 0.05-degree grid and are rounded upward to 1-mile bands below 5 miles and 5-km bands beyond. The older public km field remains rounded to 5 km. Location is not continuously tracked. Do not post contact details, addresses or access codes in text. Your own private profile and job rows remain readable to you.

5. Providers, disclosures and international processing

We use Supabase for authentication and data, Render for hosting and scheduled processing, Resend for account and job emails, Cloudflare Turnstile for anti-abuse checks, and Google when you select Google sign-in. When you choose city/neighborhood lookup, we send that general area and country to Geoapify; browser geolocation does not use that lookup. Resend receives recipient emails and limited notification content: category, general area, distance band, urgency and a login link. Authorized operators and providers process data needed for their roles under their respective terms.

The configured application and database are hosted in the United States. Providers or support operations may process information in other countries. Protections and rights may differ from your home country. Where applicable law requires transfer safeguards, we must use an appropriate lawful transfer mechanism; this notice does not claim a particular certification or unrestricted worldwide legal eligibility.

We may disclose necessary information to comply with lawful requests, protect rights and security, or as part of a business transfer subject to applicable protections. We do not sell personal information or share it for cross-context behavioral advertising. A worker or customer you choose to contact separately handles information under their own responsibilities; direct arrangements are outside our payment system.

6. Cookies, retention and security

We use authentication/session cookies and a short-lived signup preference cookie for sign-in and role selection. This release does not include advertising or optional analytics trackers. Browser or infrastructure services may retain their own necessary operational data. Blocking necessary cookies can prevent sign-in.

We retain account, profile and listing information while needed to provide the account and directory service. Closed listings remain stored until removed under our retention or deletion process. We review deletion requests and remove or de-identify information no longer needed, subject to legitimate security, dispute and legal retention needs. Authentication counter windows expire after 15 minutes or one hour, and expired counter rows are removed when the limiter next runs. Provider logs and backups follow the providers’ configured retention cycles; deletion from active systems may precede backup expiry. We do not promise immediate removal from every backup or search-engine cache. Response and notification records, delivery attempts and hourly/daily action counters are retained with the service records until removed under this process.

We use HTTPS, server-side validation, restricted database access, row-level security and authentication rate limits. Credentials intended for server use are kept on the backend. These measures reduce risk but cannot guarantee absolute security. Access to operational systems is limited to people and providers who need it for authorized purposes.

7. Your choices and privacy requests

You can edit your profile, remove profile coordinates, turn availability or email alerts off, withdraw a pending response, close an open job, mark notifications read and sign out. Job locations stay private and are retained with the job until deletion. Contact info@snellshifts.com for access, correction, export or deletion requests. Deletion is support-handled; we may verify ownership. Never email your password.

Depending on your location and applicable law, you may also have rights to object, restrict processing, withdraw consent or complain to a data-protection authority. We will assess and respond within the deadlines that apply to your request. Exceptions may require retaining limited records. We do not discriminate for exercising applicable privacy rights. Withdrawing an optional feature does not retroactively invalidate processing already performed.

8. Children and changes to this notice

The directory is not directed to children under 13. Do not provide information about children in profiles or help listings. If you believe a child has supplied personal information, contact us so we can investigate and address it. This notice does not set worker eligibility or replace final service terms.

We will update this notice as the service changes and show the effective date here. Material new uses, additional Google scopes or new optional tracking will require appropriate advance notice and any consent required by law. Planned billing or verification features are not treated as already enabled by this notice.