ALLSHIFTS PRIVACY POLICY
Updated: August 26, 2026
1. WHO WE ARE AND WHAT THIS POLICY COVERS
This Privacy Policy explains how All American Healthcare Services, Inc. and its subsidiaries and affiliates — including AllShifts Marketplace, LLC and AA East LLC (collectively, “AllShifts,” “we,” “us,” or “our”) — collect, use, disclose, and protec information in connection with:
– our websites, including AllShifts.com and AllShifts.app;
– our mobile applications, including AllShifts Marketplace and AllShifts For Facilities; and
– any related services, including customer support (collectively, the “Services”).
This Privacy Policy is incorporated into, and should be read together with, our Terms of Service. Capitalized terms not defined here (e.g., “Facility,” “Professional,” “User”) have the meanings given to them in the Terms of Service.
This Privacy Policy applies to Facilities, Professionals, Site visitors, and other individuals who interact with the Services. It does not apply to AllShifts’ own W-2 employees or job applicants in their capacity as such — that population is covered by our separate California Employee Privacy Notice and any other workforce-specific notices we provide.
2. INFORMATION WE COLLECT
We collect the following categories of information in connection with the Services:
– Identifiers and contact information: name, email address, mailing address, phone number, date of birth, username and password, and government-issued identification numbers (e.g., Social Security number, driver’s license number, passport number).
– Professional and credentialing information: employment history, professional licenses and certifications, references, resumes, skills and training records, reliability/credential scores, and shift and booking history.
– Background check and criminal history information: information contained in consumer reports and investigative consumer reports prepared on our behalf by our background check provider, currently Checkr, Inc., including criminal history, verification of education and employment history, and, where applicable, motor vehicle records, as described in our Terms of Service.
– Financial and payment information: bank account details, credit and debit card information, billing address, and tax information (e.g., Form W-9), collected to process payments to and from Users.
– Geolocation information: precise or approximate device location collected through our mobile applications for verifying arrival/departure at a shift location, matching Professionals to nearby open shifts, and fraud prevention
– Device and usage information: IP address, device identifiers, browser and operating system type, pages and screens viewed, and interactions with the Site and Services.
– Photos, images, and documents: profile photos, images of licenses/credentials, and other documents you upload.
– Communications: text messages (SMS), emails, in-app messages, and, where applicable, recordings of customer support calls, including the content of messages sent between Users through the Services.
– User content: Profile information, ratings, reviews, “Do Not Return” designations, and other content you submit that may be visible to other Users, as described in Section 3.7(t) of our Terms of Service.
– Sensitive personal information: Social Security number, precise geolocation, and, where voluntarily disclosed as part of credentialing or a background check, limited information that may reveal other sensitive characteristics.
We do not knowingly collect personal information from anyone under the age of 18. See Section 11 (Children’s Privacy) below.
3. SOURCES OF INFORMATION
We collect information:
(a) directly from you, such as when you register for an Account, complete your Profile, or communicate with us;
(b) automatically, through your use of the Site and Services (e.g., device, usage, and geolocation data); and
(c) from third parties, including background check and consumer reporting agencies, payment processors, professional references, prior employers, credentialing and licensing organizations, and other Users (such as a Facility or Professional) with whom you interact through the Services.
4. HOW WE USE INFORMATION
We use the information we collect to:
– create, verify, and maintain your Account and Profile, including identity and document verification as described in Section 1.4 of our Terms of Service;
– operate the marketplace — matching Professionals with open shifts posted by Facilities, and enabling Facilities to review and approve Professionals;
– conduct and process the results of background checks for credentialing purposes;
– process payments, issue tax forms (e.g., Form W-9), and manage billing;
– send SMS, email, push, and in-app communications relating to shifts, transactions, Account activity, and, where you have consented, marketing (see Section 3.6 of our Terms of Service regarding SMS consent and opt-out);
– provide customer support and respond to inquiries;
– maintain the safety, security, and integrity of the Services, including fraud prevention, enforcement of our Terms of Service, and investigation of misconduct (e.g., “Do Not Return” designations, Account reviews);
– comply with applicable law, respond to legal process, and enforce our agreements; and
– improve and develop the Site and Services.
We do not use automated decision-making to make legal or similarly significant decisions about Users without human involvement.
5. HOW WE SHARE INFORMATION
We do not sell your personal information for money.
We share information with the following categories of recipients, for the purposes described above:
– Facilities and Professionals: to operate the marketplace, we share relevant Profile, credentialing, background check, and reliability information between Facilities and Professionals as part of the shift-matching and approval process described in our Terms of Service (e.g., background check results are made available to Facilities as part of the credentialing process).
– Service providers: vendors who perform services on our behalf, including our background check provider (Checkr, Inc.), state specific healthcare background check providers, payment processors, SMS/communications platforms, cloud hosting providers, and customer support tools.
– Affiliates: our corporate affiliates and subsidiaries, for the purposes described in this policy.
– Professional advisors and legal/regulatory recipients: auditors, accountants, and attorneys; and public and governmental authorities, where required by law, legal process, or to protect the rights, property, or safety of AllShifts, our Users, or others.
– Business transfers: a party involved in a merger, acquisition, financing, or sale of all or part of our business or assets.
We will not share SMS opt-in information or phone numbers collected for SMS communication purposes with any third party or affiliate for marketing purposes.
6. DATA RETENTION
We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, based on the following criteria:
– the length of time your Account remains active and we have an ongoing relationship with you;
– whether retention is necessary to provide the Services or complete a transaction you requested;
– whether we are subject to a legal, regulatory, contractual, or credentialing obligation to retain the information (for example, background check and credentialing records that Facilities or applicable healthcare licensing rules require us to keep, or tax and financial records, which are typically retained for up to seven (7) years) ; and
– whether retention is advisable in light of our legal position, such as applicable statutes of limitations, ongoing or anticipated disputes, or regulatory inquiries (see also Section 9 of our Terms of Service regarding dispute resolution).
When information is no longer needed for these purposes, we delete it or de-identify it in accordance with our internal data retention practices.
7. DATA DELETION AND YOUR ABILITY TO CONTROL YOUR INFORMATION
You may request deletion of your Account and the associated personal information we hold about you at any time. To do so, you may:
1. In the app: Go to Profile > Scroll to Bottom to Delete User Account.”
2. Online, without needing the app installed: Go to AllShifts.app. Provide your phone number.
Go to Profile > Scroll to Bottom to Delete User Account.
3. By emailing humanresources@allshifts.com with the subject line “Data Deletion Request,” or by calling (866) 629-2242.
After verifying your identity, we will delete or de-identify your personal information, and confirm completion to you, within 45 days (extendable once by an additional 45 days where reasonably necessary, with notice to you) or such other period required by applicable law.
Exceptions. We may retain certain information after a deletion request where necessary to:
– comply with a legal or regulatory obligation (e.g., background-check and credentialing records that a Facility contract or licensing rule requires us to keep, or tax/financial record keeping requirements);
– detect, prevent, or investigate fraud, security incidents, or abuse of the Services;
– complete a transaction, or fulfill the terms of a written warranty or product recall conducted in accordance with applicable law;
– resolve disputes or enforce our agreements, including in connection with the dispute resolution process described in Section 9 of our Terms of Service; or
– otherwise as required or permitted by applicable law.
Where an exception applies, we will isolate the retained information from further use except for the purpose that justified retaining it. Deleting your Account and data is different from deactivating or “freezing” it — a deletion request results in the permanent removal (or de-identification) of your associated personal information, not merely a temporary suspension.
8. YOUR PRIVACY RIGHTS (CALIFORNIA AND OTHER STATES)
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”), gives you the following rights with respect to your personal information, subject to certain exceptions:
– Right to know/access the categories and specific pieces of personal information we have collected about you, the sources of that information, and the categories of third parties with whom we have disclosed it;
– Right to delete personal information we have collected from you (see Section 7 above);
– Right to correct inaccurate personal information we maintain about you;
– Right to opt out of the sale or sharing of your personal information. AllShifts does not sell personal data.
– Right to limit the use or disclosure of sensitive personal information to purposes permitted by the CCPA;
– Right to non-retaliation for exercising any of these rights, including if you are a job applicant, employee, or independent contractor; and
– Right to appeal if we decline to act on your request (see below).
Residents of Colorado, Connecticut, Virginia, Utah, Texas, and other states with comprehensive privacy laws have similar rights to know, access, correct, delete, and obtain a portable copy of their personal information, and to opt out of the sale of personal information, targeted advertising, and, in most of those states, certain profiling.
How to exercise your rights. You may submit a request by emailing humanresources@allshifts.com or calling (866) 629-2242. We will verify your identity before responding, which may require you to provide additional information. If you use an authorized agent to submit a request on your behalf, we may require the agent to provide proof of authorization and may still require you to verify your own identity directly with us.
Appeals. If we decline to act on your request, you may appeal by contacting us at the email above with the subject line “Privacy Appeal.” We will respond to your appeal within 45 days.
9. COOKIES AND TRACKING TECHNOLOGIES
We and our service providers use cookies and similar technologies on the Site to recognize your browser, remember your preferences, and understand how the Site is used.
You can control cookies through your browser settings; disabling cookies may affect the functionality of the Site.
10. DATA SECURITY
We maintain administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, or destruction, including encryption in transit, access controls, and employee training.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you and applicable regulators as required by law.
11. CHILDREN’S PRIVACY
The Services are intended for business use by Facilities and Professionals and are not directed to, or intended for use by, anyone under 18 years of age, consistent with the eligibility requirements in Section 1.2 of our Terms of Service. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us using the information in Section 14 below so we can delete it.
12. THIRD-PARTY LINKS
The Site and Services may contain links to third-party websites or services that are not owned or controlled by AllShifts. This Privacy Policy does not apply to those third parties, and we encourage you to review their privacy policies before providing them with information.
13. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. When we do, we will post the revised policy on this page and update the “Last Updated” date above. If we make a material change, we will provide additional notice as required by applicable law (for example, by emailing the address associated with your Account). We intend to review this Privacy Policy at least once every 12 months.
14. CONTACT US
If you have questions about this Privacy Policy or wish to exercise any of the rights described above, contact us at:
AllShifts
494 Broad Street, 4th Floor, Newark, NJ 07102
Email: legal@allshifts.com
Phone: (866) 629-2242