Privacy Policy

FlexShift ("we," "our," or "us") operates a two-sided staffing platform that connects licensed pharmacists with pharmacies that need shift coverage. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the choices available to you. By creating an account or using the FlexShift platform—including our website and mobile application—you agree to the practices described here.

1. Information We Collect

Account Information

When you register, we collect your full name, email address, and a hashed password. Pharmacy owners also provide their business name, pharmacy address, and state license number. Pharmacists provide their Florida Board of Pharmacy license number, National Provider Identifier (NPI), and, where applicable, DEA registration details necessary for shift verification.

Identity and License Verification

To maintain a verified network, pharmacists are required to upload supporting documents (e.g., a copy of their pharmacy license). These documents are stored in encrypted form on Amazon Web Services (AWS) S3. We cross-reference license data against Florida Board of Pharmacy public records to confirm active licensure status before approving a pharmacist to apply to shifts.

Payment Information

Payment processing is handled entirely by Stripe. Pharmacy owners provide payment method details (credit or debit card) directly to Stripe via Stripe's secure elements; we never receive or store full card numbers. Pharmacists connect a bank account for direct deposit through Stripe Connect; banking credentials are held by Stripe, not FlexShift. We store only transaction records, amounts, and status information necessary for your earnings history and pharmacy billing records.

Shift and Platform Activity

We collect data about the shifts you post or apply to, including dates, times, hourly rates, locations, applicant decisions, shift status, and post-shift review scores. This activity data is used to operate the platform, resolve disputes, and generate earnings and billing summaries.

Communications

The built-in shift chat system logs messages exchanged between pharmacists and pharmacy owners within a shift context. These messages are stored to support dispute resolution, platform safety reviews, and moderation. You should not share protected health information (PHI) or any patient-related data through shift chat.

Device and Usage Information

We automatically collect information such as your IP address, device type, operating system, browser or app version, pages visited, features used, and timestamps of activity. This information is used for security monitoring, debugging, and improving platform performance.

Location Information

If you grant location permission in the mobile app, we use your approximate location to surface nearby open shifts. We do not continuously track your location outside the app.

2. How We Use Your Information

• Platform operations. Matching pharmacists with open shifts, processing payments, sending shift notifications, and enabling in-app chat.
• License verification. Confirming pharmacist credentials against Florida Board of Pharmacy records before granting platform access.
• Payments and earnings. Routing payouts to pharmacists via Stripe Connect and charging pharmacy owners after shift completion.
• Safety and integrity. Detecting fraud, investigating policy violations, and enforcing our Terms of Service.
• Customer support. Responding to questions, resolving disputes, and addressing account issues.
• Product improvement. Analyzing aggregate usage patterns to improve features, fix bugs, and develop new functionality.
• Legal compliance. Meeting our obligations under applicable federal and state laws.

3. How We Share Your Information

Between Users on the Platform

When a pharmacist applies to a shift, the posting pharmacy sees the pharmacist's name, license status, star rating, and relevant experience. When a pharmacy owner confirms a pharmacist, both parties can access each other's display name and communicate via in-app chat. We do not share personal contact information (phone numbers, personal email addresses) between parties.

Service Providers

We engage trusted third parties to help operate the platform, including:

• Stripe, Inc. — payment processing and payouts.
• Amazon Web Services (AWS) — cloud hosting, database infrastructure, and encrypted document storage.
• Google Firebase — push notification delivery.
• Florida Board of Pharmacy — license status verification (read-only, no data transmitted to the Board).

These providers are contractually required to use your information only to provide services to FlexShift and to maintain appropriate security measures.

Legal Requirements

We may disclose information when required by law, subpoena, court order, or government regulation, or when we believe disclosure is necessary to protect the rights, property, or safety of FlexShift, our users, or the public.

Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, user information may be transferred to the acquiring entity. We will notify you via email or a prominent notice on our platform before your information becomes subject to a materially different privacy policy.

4. Data Retention

We retain account information for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 90 days, except where retention is required by law (e.g., financial records required for tax purposes, which we retain for seven years). Shift chat messages associated with completed shifts are retained for two years to support dispute resolution.

5. Your Rights and Choices

Depending on your state of residence, you may have rights to access, correct, or delete personal data we hold about you, to opt out of certain uses, or to receive a copy of your data in a portable format. To exercise any of these rights, contact us at privacy@flexshift.org. We will respond within 45 days. We do not sell personal information to third parties.

6. Security

We use industry-standard safeguards including TLS encryption for data in transit, AES-256 encryption for data at rest, role-based access controls, and regular security reviews. No method of transmission or storage is 100% secure; we cannot guarantee absolute security, but we take reasonable and appropriate measures to protect your information.

7. Children's Privacy

The FlexShift platform is intended for adults who hold or seek professional pharmacy licensure. We do not knowingly collect personal information from individuals under the age of 18. If we learn that we have inadvertently collected such information, we will promptly delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice in the app at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes your acceptance of the updated policy.

9. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

FlexShift
Florida, USA
privacy@flexshift.org