Privacy

If you work at a venue that uses Shifts

Your employer (the café, restaurant or pub) chose Shifts for its schedule. Your employer is responsible for your information, and we handle it for them. Under BC law an employer can use employee information to manage work after telling you about it. The short version for staff is at heyeugene.app/staff.

• What it keeps: your name, role, photo if you add one, mobile, shifts and availability, requests (time off, swaps, sick days), messages with the agent, clock in and out times, and what you post or react to on the Team board.
• What it doesn't: it never asks why you're sick and doesn't track where you are. Coworkers never see your phone number or why you're off.
• Texts: only after you join from your team link and confirm your mobile with the code we text you (or text JOIN). We keep when and how you agreed. Text STOP any time and we stop, HELP for help. Message frequency varies, message and data rates may apply. We never use or share your number for marketing.
• An AI reads your messages. The agent is software and says so. Anthropic's Claude reads your messages to understand them. Your manager sees your requests and what the agent suggests, and approves changes.
• Our review: to fix the agent's mistakes, our daily review reads conversations with it, AI first and the HeyEugene team when needed. If you tell the agent something in the app isn't working, we keep that message so we can fix it, and your manager isn't alerted. Those reports are deleted after 90 days too.
• How long: messages are deleted after 90 days. Hours stay with your employer, because employers must keep pay records. Delete my profile in the app removes your number, messages and comments. Your name stays on past shifts and hours.
• Your rights: you can ask to see or correct your information, from your manager or from us. If you're not happy with the answer, you can contact the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca).

If you run a venue

We keep your name, email and mobile if you give them, your venue's details, your plan, and when you accepted which version of the Terms. Cards are processed by Stripe. We see only the card type, last 4 digits and expiry. How we handle your team's information is in the Terms, section 11.

If you try it with a photo, before signing up

At heyeugene.app/try you can send a photo of your schedule without an account. The names on it are your staff's personal information, so we use the photo only to build your month on screen: Anthropic's Claude reads it, and the photo and what was read off it are kept privately, never shown to anyone else. If you don't sign up, both are deleted after 24 hours. If you do, they move into your venue like a photo you send from the app. We count how many tries are made and saved, never the names.

If you visit heyeugene.app

We count what visitors do on our pages (which parts they read, how much of the video they watch, how far they get in the sign-up form, where they came from) with our own tool. No cookies, no IP address, no form contents: a random ID kept in your browser. If you sign up, we link that visit to your venue. If your browser sends Do Not Track or Global Privacy Control, we count nothing. These records are deleted after about 13 months.

On public pages, Microsoft Clarity also records anonymous page visits after the page is idle, except in Quebec and when your browser signals Do Not Track or Global Privacy Control, you are a bot, or you opt out. Clarity analytics storage is enabled for this purpose; advertising storage is denied. You can use “Opt out” at the bottom of any public page. We mask forms and schedule previews so their contents and staff names are not recorded. Clarity is not used in the logged-in owner or staff app.

Who processes it

Supabase (database), Railway (hosting), Twilio (texts), Meta (WhatsApp, once a venue uses it), Anthropic (AI), Apple, Google and Mozilla push services (encrypted app alerts), Stripe (venue billing), Cloudflare (domain and security), Google (email). Some store data outside Canada, mainly in the United States, where it can be subject to local law. We don't sell personal information and don't use it for advertising.

Security

Connections are encrypted, access is limited to Eugene Tamarovsky and the providers above, and each venue sees only its own data. No system is perfectly secure. If we learn of unauthorized access to a venue's data, we tell the venue, which decides whether to tell its staff.