Privacy Policy

ScheduleItch provides software that organizations use to manage their workforce. The organization using the service generally decides which employee information is entered, who may access it, how it is used for employment or operational purposes, and when it should be corrected or removed. ScheduleItch processes that information to provide and support the service.

Organizations and their administrators are responsible for providing appropriate notices to their personnel, obtaining any permissions required by law, maintaining accurate access settings, and using workforce information lawfully.

• Account and identity information: names, work email addresses, authentication identifiers, organization and department memberships, roles, and access permissions.
• Workforce and scheduling information: availability, assignments, shifts, hubs or work locations, schedule publication status, notes, staffing requirements, employee roles, and day-off requests and decisions.
• Professional and productivity information: qualifications, proficiency information, required availability, monthly case-report information, completed and required case counts, and related report-matching records when an organization uses those features.
• Administrative records: invitations, approval records, audit trails, actor and View As context, notification status, and records needed to preserve data integrity and investigate changes.
• Technical information: session and security information, request metadata, browser or device information made available through standard web requests, error and deployment logs, and limited local browser state used to keep application context consistent.
• Operational inputs: case locations, airports, routes, dates, and similar information submitted to optional planning tools. Users should not enter patient records or other information that the relevant feature does not require.

Some workforce information may be sensitive in an employment context. ScheduleItch does not claim that all information processed by the service is non-sensitive.

Information may be supplied by an organization, an authorized manager or administrator, an employee, an imported report, or generated through use of the service. Authentication and technical information may also be generated automatically when a user signs in or interacts with the application.

• Authenticate users and maintain secure sessions.
• Provide availability, scheduling, time-off, reporting, personnel-awareness, audit, export, and related operational features.
• Apply organization, department, manager, employee, and System Administrator permissions.
• Send account, invitation, time-off, and authorized emergency-backup communications.
• Maintain data integrity, investigate errors, prevent abuse, and support recovery.
• Operate, test, secure, and improve ScheduleItch.
• Comply with applicable law and enforce service terms.

ScheduleItch does not use workforce information for third-party behavioral advertising and does not sell personal information.

Information is available to users within the relevant organization according to configured permissions. Employees, managers, administrators, and System Administrators may receive different views. Some categories, including qualifications and monthly productivity information, are subject to additional visibility restrictions.

ScheduleItch may disclose information to the organization that provided it; to authorized users acting for that organization; when directed by the organization; when required by law; or when reasonably necessary to protect the service, its users, or others. Information is not made public through the service merely because it is stored in ScheduleItch.

ScheduleItch currently relies on service providers including Supabase for database and authentication services, Vercel for application hosting and operational logs, and Resend for transactional email. Optional operational tools may query external weather, airport, geocoding, mapping, or public-data services, including Open-Meteo, AviationWeather.gov, the U.S. Census Geocoder, and Nominatim/OpenStreetMap. A report imported from a public PDF link is retrieved from the host selected by the user.

These providers process limited information needed to perform their services under their own terms and privacy practices. ScheduleItch does not authorize them to use workforce information for their own advertising.

ScheduleItch and Supabase use cookies or equivalent browser storage to establish and refresh authenticated sessions. ScheduleItch also uses a short-lived application cookie for authorized System Administrator “View As” context and limited local browser storage to signal account or organization context changes between tabs. These technologies are used for sign-in, security, and application operation, not advertising.

ScheduleItch uses reasonable administrative and technical safeguards appropriate to the service’s current stage, including authenticated access, server-side authorization, tenant and department scoping, restricted service credentials, audit records, and provider-hosted security controls. No internet service or storage method can be guaranteed completely secure, and ScheduleItch does not make an absolute security guarantee or claim an independent security certification.

ScheduleItch does not currently publish one fixed retention period for all information. Workforce records are generally retained while the organization uses the service and as reasonably needed for scheduling history, audits, data integrity, backup and recovery, security, dispute resolution, and legal obligations. Provider logs, email-delivery records, and backups may follow separate provider retention cycles.

The service does not currently offer a universal self-service account-deletion tool. Employees should first direct access, correction, or deletion requests to their organization’s administrator. Organizations may request assistance from ScheduleItch. Some records may need to be retained or de-identified when deletion would compromise audit history, security, another person’s rights, or a legal obligation.

Depending on location and applicable law, individuals may have rights to request access, correction, deletion, restriction, or a copy of personal information, or to object to certain processing. These rights may be limited by employment, recordkeeping, security, and other legal requirements. Because organizations control most workforce records, ScheduleItch may refer a request to the relevant organization for verification and response.

ScheduleItch is a workforce service and is not directed to children for personal or consumer use. An organization that authorizes a minor to use the service is responsible for ensuring that the account and related processing are lawful.

This policy may be updated as the service, providers, or legal requirements change. The effective date above will be revised when a new version is published. Material changes may also be communicated through the service or the relevant organization when appropriate.

ScheduleItch is individually owned and operated in South Carolina, United States.

Public contact email: [PUBLIC CONTACT EMAIL PENDING]

Until a public contact address is designated, users should contact their organization’s ScheduleItch administrator. The public contact information on this page will be updated when a suitable mailbox is available.