Privacy Policy

Last updated: May 6, 2026

1. Who We Are

Shift Ready is operated by Blake Phelps. Contact: phelpsblake68@gmail.com

2. What We Collect

• Store name and store code
• Staff names entered by managers
• Operational data (issues, clock-ins, game reports, etc.)
• Login timestamps and IP addresses for security
• Contact info if you fill out the pricing form

3. What We Do NOT Collect

• Raw PINs — all PINs are SHA-256 hashed and cannot be reversed
• Payment card numbers — handled entirely by Stripe
• Location data, biometrics, or government IDs

4. How We Use Your Data

• To operate the Shift Ready platform
• To sync data across devices at your store
• To authenticate staff logins securely
• To detect unauthorized access attempts
• To respond to support requests

5. Security

• All data transmitted via HTTPS/TLS encryption
• PINs hashed with SHA-256 — we cannot recover them
• JWT tokens authenticate every API request
• Each store's data isolated from other stores
• Failed logins rate-limited and logged

6. Data Retention

Data kept while subscription is active. Resolved records auto-purge after 12 days. 30 days preserved after cancellation then permanently deleted.

7. Third Parties

• Railway — database hosting
• Netlify — web hosting
• Stripe — payment processing
• Formspree — contact form submissions

8. Your Rights

You can request a copy, correction, or deletion of your data at any time. Email phelpsblake68@gmail.com.

9. Contact

Email: phelpsblake68@gmail.com