Effective [EFFECTIVE DATE] ยท Version 2
1. Who this covers
This policy covers taskstrider.com and the TaskStrider app, run by TaskStrider LLC ("we," "us"). It applies to shop owners, managers and employees.
Each shop controls the information about its own employees. We store and use that information on the shop's behalf.
2. What we collect
From shops and managers: business name and address, owner and manager names, email addresses, phone numbers, and billing details.
About employees, entered by the shop or the employee:
- Name
- Shifts, schedules and availability
- Time off, call-offs and shift swaps
- Notices and job board entries
- PIN, stored only in scrambled form that can't be turned back into the PIN
We don't ask for employees' birth dates, Social Security numbers or bank details.
Automatically: IP address, browser type and basic logs of activity, used for security and fixing problems. We use cookies only to keep people signed in, to remember a shop's registered devices, to remember each device's light or dark setting, and to remember whether notifications are on for a device. We don't use advertising or tracking cookies.
If you turn on notifications on a device: the address your browser gives us for sending notifications to that device, and two keys that encrypt each one. Nothing else about the device.
Payments: card payments go through Stripe. We never see or store full card numbers.
3. How we use it
- To run TaskStrider: show schedules, send notices and notifications, and email managers.
- To give support and fix problems.
- To keep the app secure.
- To bill shops.
- To build combined, anonymous totals that help us improve the app. These never identify a shop or a person.
We never sell personal information and never use it for advertising.
4. Who we share it with
Only with companies that help us run TaskStrider, and only what each one needs:
| Company | What it does for us |
|---|---|
| Render | Runs the app |
| Neon | Stores the database |
| Postmark | Sends emails |
| Sentry | Reports app errors so we can fix them |
| GitHub | Runs the nightly backup and cleanup jobs |
| Backblaze | Stores encrypted backups |
| Google Workspace | Our business email |
| Stripe | Processes payments |
| Apple, Google, Microsoft or Mozilla | Delivers notifications to devices that turn them on |
Only the one that runs your browser's notification service is involved, and only if you turn notifications on: Apple for Safari and iPhones, Google for Chrome and Android, Microsoft for Edge, Mozilla for Firefox. Each notification is encrypted, so they can't read it. They see only delivery details, such as which device it's for and when it was sent.
Healthchecks.io also checks that our nightly backup and cleanup jobs ran. It receives no personal information.
We may also share information if the law requires it, or with a buyer if TaskStrider is sold. A buyer would have to follow this policy.
5. When we look inside a shop's account
We only look at a shop's information to give support, fix a problem, or deal with a security issue.
6. Where it's stored
Your information is stored in the United States. The app and database run in Ohio, and backups are stored in the eastern United States.
7. How we protect it
- All connections are encrypted (HTTPS).
- PINs are stored scrambled, never as plain text.
- Backups are encrypted before they leave our system.
- Notifications are encrypted all the way from our server to your device.
- The outside accounts we use to run TaskStrider use two-step sign-in.
No system is perfectly secure. If a breach affects a shop's information, we email that shop as soon as reasonably possible, aiming for within 72 hours of confirming it. We tell them what happened, what information was involved, and what we're doing about it.
8. How long we keep it
- While a shop is subscribed, we keep its information.
- We delete a shop's information 30 days after its account is cancelled.
- If a shop signs up online and doesn't add a card within 7 days, or is set up in person and doesn't add one within 30 days, we delete its information.
- If someone starts signing up but never confirms their email address, we delete what they entered within 7 days.
- To stop abuse of the signup form, we keep a scrambled form of each visitor's IP address and email address for up to 7 days. It can't be turned back into either.
- A device's notification details are deleted when notifications are turned off on it, when its person is deactivated or changes their password or PIN, when the device is turned off or replaced, when a manager signs every device out, or when the browser's notification service says the device no longer takes them.
- After we delete information, copies can stay in our encrypted backups for up to 60 more days. Then they're gone.
- We keep billing records and the record of the shop agreeing to our Terms as long as tax and business laws require. To keep the free trial to one per business, we also keep a scrambled form of the email that started it, which can't be turned back into the address. Stripe keeps its own payment records under its own privacy policy.
- We keep our own short history of each account: its business name and what we did, and when.
9. Employee requests
If you're an employee and want to see, correct or delete your information, ask your employer. The shop decides, and we help it carry out the request. If you contact us directly, we'll pass your request to your shop.
10. Children
TaskStrider is not for children under 13, and we don't knowingly collect their information. Shops may only add employees who are 14 or older. If we learn that information about a child under 13 was added, we delete it.
11. Emails and notifications we send
We only send emails about accounts and the app, like notices to managers, sign-in links and billing. Employees see their notices in the app. Anyone can also turn on notifications on their own phone or computer: a notification only says that something is waiting in TaskStrider, never who, when or why. We don't send marketing emails or notifications to employees.
12. Changes to this policy
We email shops at least 30 days before a real change takes effect. Small fixes, like typos, take effect right away.
13. Contact
- Email: kyle@taskstrider.com
- Phone: (717) 804-4948
- Mail: TaskStrider LLC, [MAILING ADDRESS]