Privacy Policy

Data We Collect

We collect only the information necessary to provide our volunteer scheduling service:

• Email address (for account authentication)
• Volunteer names and group assignments
• Shift schedules and assignments
• Check-in/check-out timestamps
• Asset assignment records

How We Use Your Data

• To provide event management and volunteer scheduling services
• To enable organizers to manage their events
• To facilitate check-in and asset tracking
• To generate reports and analytics for event organizers

Data Storage & Security

Your data is securely stored using Supabase, a SOC 2 Type II certified platform. All data is encrypted in transit (HTTPS) and at rest. We implement Row-Level Security policies to ensure users can only access their own events and data.

Cookies

We use essential cookies to maintain your login session and ensure the site functions properly. These cookies are necessary for the service to work and cannot be disabled.

Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your data

To exercise these rights, visit your account settings or contact support.

Data Retention

We retain your data for as long as your account is active. When you delete your account, all associated data (events, volunteers, shifts, assignments) will be permanently deleted within 30 days.

Third-Party Services

We use the following third-party services:

• Supabase: Database and authentication
• Railway: Auto-assignment API

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by email or through the application.