Privacy Policy
Effective date: September 12, 2026.
ShiftReady LLC operates ShiftReady, a restaurant training service. Drew Shirback is the contact for questions about this policy. Contact: drew@shiftready.works.
Information we process
When you create an account, we process your name, email address, account identifier, and authentication information. If you sign in with Google, we receive your basic profile and email information. We do not request access to your Gmail messages, contacts, or Google Drive files.
Restaurant organizations provide location details, staff memberships and roles, menus, recipes, policies, and other uploaded training materials. ShiftReady stores assigned training, lesson progress, quiz and exam attempts and scores, practical sign-off records, and related timestamps and access activity. We also process technical information needed to operate and secure the service, including service logs, browser requests, and email delivery events.
When you request a restaurant demo, we save the contact details, restaurant information, preferences, and message you submit so platform administrators can follow up. Please do not include confidential recipes or unnecessary staff details in that form.
How information is used
We use information to authenticate users, manage organization and location access, deliver training, calculate readiness, preserve progress, record trainer sign-offs, support content review and publication, send account and relevant training emails, provide support, and maintain the service.
The application’s built-in drafting tools extract and organize supplied materials. For assisted onboarding, ShiftReady may also use OpenAI’s ChatGPT or Codex to help prepare lessons and questions from public restaurant information and materials supplied for that purpose. Restaurant representatives should only supply information they have permission to share and should not include unnecessary employee or customer personal information. A restaurant must review generated lessons, answer keys, ingredients and procedures before approving staff training.
Who can access information
Employees can access their assigned workspace and training information. Authorized trainers, managers, organization owners, and ShiftReady platform administrators can access information appropriate to their roles. Your restaurant organization determines staff access and how it uses employee training records. Employees should contact their organization about its workplace training practices.
We use Google Firebase/Google Cloud for hosting, Supabase for authentication, database and file storage, and Resend for transactional email. These providers process information needed to deliver those services. Service processing may occur in the United States and other locations used by those providers. Information may also be disclosed when necessary to respond to lawful requests, protect the service, or carry out a business transfer, subject to applicable obligations.
OpenAI may process materials used in assisted course preparation. Applicable processing and retention depend on the OpenAI service and account settings used; this policy does not promise zero retention or exclusion from model training without separately verified controls.
ShiftReady does not use the current application to sell personal information or serve targeted advertising.
Cookies and browser storage
ShiftReady uses authentication cookies and browser storage needed to keep you signed in and remember interface preferences such as light or dark mode. The current application does not include advertising trackers.
On public pages, we count contact-button clicks, sample starts, and saved inquiries by day and page category. These counts contain no visitor identifier, contact details, full URLs, or browsing history. Click measurement respects browser Do Not Track and Global Privacy Control signals. For spam prevention, a keyed hash of an inquiry email may be retained in short-lived rate-limit counters; raw email addresses are not stored in those counters.
Retention and requests
Account, membership, course-version, and training records are retained to operate the service and preserve training history. Removing access does not automatically erase historical training evidence. Contact drew@shiftready.works to request access, correction, or deletion of information, or to ask about retention. We will verify the request and coordinate with the restaurant organization where appropriate. Legal requirements, security needs, and backup recovery processes may affect what can be removed and when.
Security
ShiftReady uses authenticated access, organization and location permissions, database row-level security, private training-file storage, and encrypted connections. No internet service can guarantee absolute security.
Intended users
ShiftReady is intended for restaurant organizations and their authorized staff. It is not directed to children under 13. Contact us if you believe a child under 13 has supplied personal information.
Changes and contact
We may update this policy as the service changes. The published policy will show its effective date. Privacy questions and requests may be sent to Drew Shirback at drew@shiftready.works, ShiftReady LLC.