Privacy Policy
1. Who we are
SideGiggss (“SideGiggss”, “we”) operates the website sidegiggs.app, the SideGiggss shift marketplace, the ShiftAI scheduling product and the SideGiggss mobile web app (together, the “Service”). We are based in the Tampa Bay area of Florida, United States. Contact: hello@sidegiggs.app.
2. Information we collect
From clinicians
- Account and profile: name, email, phone, password (stored as a one-way hash), profession, specialties, certifications, years of experience, ZIP code and travel radius, availability and shift preferences.
- Credentials: license number and state, license and certification documents you upload, expiry dates, and the outcome of verification checks.
- Work records: offers sent to you, shifts accepted, hours submitted and approved, ratings, and messages exchanged through the Service.
- Payout details: handled by Stripe. We store only a Stripe account identifier and payout status, never your bank account number.
From facilities
- Organization and users: facility name, type, address, departments, billing email, and the names, emails and roles of staff you invite.
- Roster data you import: employee names, roles, certifications, contact details and availability, which you must have the right to share with us.
- Operational data: shifts posted, offers, confirmations, timesheets, approvals, invoices and exports.
- Payment method: handled by Stripe. We store a Stripe customer identifier and the card or bank last four digits only.
Automatically
Sign-in times, IP address, browser type, device type and pages used, kept in security and audit logs. We do not use advertising pixels or sell data to data brokers.
3. How we use information
- To match posted shifts with eligible clinicians (role, credentials, availability, distance, rating) and send offers by in-app notification and email.
- To verify credentials, run expiry reminders, and let facilities review credential status before confirming a clinician.
- To record hours, calculate pay, invoice facilities and pay clinicians through Stripe.
- To operate, secure, audit and improve the Service, and to communicate with you about your account.
- For ShiftAI, to convert plain-English scheduling requests into constraints. Prompts contain staffing rules, not patient information.
4. Protected health information
The Service is a staffing tool and is not designed to receive patient records. Facilities agree not to enter protected health information (PHI) into free-text fields. Where a facility requires us to handle PHI, we will sign a Business Associate Agreement before any such data is shared. See the Compliance page.
5. Sharing
- Between facilities and clinicians: a facility sees the profile, credential status and documents of clinicians it employs, has offered a shift to, or has booked. A clinician sees the facility name, unit, address and shift details for offers and bookings.
- Service providers: Netlify (hosting), Neon (database), Netlify Blobs (document files), Stripe (payments and payouts), Resend (email) and Groq (language model for ShiftAI requests). Each processes data only to provide its service to us.
- Legal: when required by law, to protect the rights and safety of users, or in connection with a merger or acquisition.
We do not sell personal information.
6. Security
Data is encrypted in transit (TLS) and at rest. Phone numbers and license numbers are additionally encrypted at the field level. Access is role-based; every post, offer, approval, export and sign-in is audit-logged. Payment details are held by Stripe, never by SideGiggss.
7. Retention
Account and work records are kept for the life of the account and for seven years afterwards to meet payroll, tax and staffing-record obligations. Credential documents are deleted 90 days after an account is closed unless a longer period is legally required. You may request earlier deletion of data we are not required to keep.
8. Your choices
- Update profile, notification preferences (email, text) and travel radius at any time in the app.
- We do not send text messages today. Notices arrive in the app and by email; you can unsubscribe from non-essential email at any time.
- Request a copy or deletion of your data by emailing hello@sidegiggs.app from the address on your account.
Residents of states with privacy laws (including California, Virginia, Colorado, Connecticut and Texas) may exercise access, correction, deletion and portability rights through the same address. We do not discriminate for exercising these rights.
9. Children
The Service is for adults working in or operating healthcare facilities. We do not knowingly collect information from anyone under 18.
10. Changes
We will post updates here and, for material changes, notify account holders by email at least 14 days before they take effect.