Privacy policy

Who we are

ClubShift (getclubshift.com) is a staff-scheduling platform for golf operations, based in Morristown, New Jersey. This policy explains what information the platform handles, why, and what your choices are. We keep it in plain English on purpose.

What we collect

• Customer applications. When a club applies through /start, we store what the form asks: club name and location, facility type, crew size, the contact's name, role, email and phone, how scheduling works today, timeline, and anything written in the notes field.
• Sign-in data. Accounts use passwordless email links. We store your email address and sign-in activity. We never store a password, because there isn't one.
• Scheduling data your club enters. Directors enter their roster (staff names, emails, roles); staff enter weekly availability; the product generates and stores schedules and computes worked hours from them. This data belongs to the club — we process it to run the service.

We do not collect payment card details on this site today. We use no advertising trackers. We measure site traffic with Vercel Web Analytics, which is cookieless and anonymous — it counts visits without identifying you or following you across sites.

How we use it

To run the product, respond to applications, send sign-in links and service notices, and improve the platform. We do not sell personal information and we do not share it with third parties for their marketing.

Who can see what

Access is enforced in the database itself, per club. Staff members see only their own pages — their availability, their published schedule, their hours. Directors see their own department's roster, availability and schedules. One club can never see another club's data. Draft schedules are invisible to staff until a director publishes them.

Where it lives

Data is stored with Supabase (PostgreSQL, hosted in the United States) and the site is served by Vercel. These providers process data on our behalf under their own security and privacy commitments.

How long we keep it

• Applications: kept while we evaluate and work with the club, and up to 12 months if it doesn't move forward — then deleted. Email us to have yours deleted sooner.
• Club and scheduling data: kept while the account is active, and for 90 days after cancellation so the club can export it — then deleted.

Your rights

Email us to access, correct or delete information about you. If you're a staff member, your club's director administers the roster — requests can also go through them. We honor deletion requests unless the club needs the record for its own legal obligations (for example, hours records).

Cookies

Only what sign-in requires: a session token kept in your browser so you stay signed in. No advertising cookies, no cross-site tracking.

Young workers

ClubShift is a workplace tool used at an employer's direction. It is not directed to children, and we do not knowingly collect information from anyone under 13. Clubs remain responsible for complying with youth-employment laws that apply to their own staff.

Changes

If this policy changes in a way that matters, we'll note it here with a new date, and notify active clubs by email for significant changes.