Last Updated: October 15, 2025

ShiftKey Privacy Policy

Introduction.

This notice describes how we use your personal information.

This ShiftKey Privacy Policy (“Privacy Policy”) applies to ShiftKey’s online platforms located at www.shiftkey.com and all pages accessible through such site (“Site”); (2) ShiftKey’s mobile application, and (3) all other related services available through ShiftKey’s technology and products of (collectively known as the “Platform”) ShiftKey LLC, a Texas limited liability company and its affiliates including but not limited to OnShift, Inc. ( “ShiftKey,” “we,” or “us”) that link to this Privacy Policy. We take your privacy very seriously. How we will handle information we learn about you depends upon what you do when using one of our services, mobile applications, or websites (collectively our “Services”). Our Platform connects independent healthcare professionals ( “Professional” or “Professionals”), as self-employed or independent contractors, to healthcare facilities ( “Facility” or “Facilities”) for the purpose of engaging in business-to-business arrangements whereby the two may contract for services needed by the Facility. We strive to make all choices you make while using our Services as transparent as possible. We also hold the security of your personal information and business information as our top priority. This Privacy Policy covers personally identifiable information and other information that you provide us through your use of our Services. The purpose of this Privacy Policy is to explain what information we collect, how we may collect it, to whom we may disclose it, and certain other matters related to such information, including the choices you have regarding our collection of information. We reserve the right to make changes to this policy at any time and will update this Privacy Policy on the Services when we do so.

1. Information ShiftKey Collects

Dependent on the Services you use, ShiftKey may collect the following personal information:

1.1 Information Collected Through All Services:

When you use any of the Services, we may collect your user ID and password, name, email address, telephone number, physical address, birth date, gender, zip code, content you provide by filling in forms or by corresponding with us by phone, e-mail, or otherwise.

1.2 For Professionals

We generally collect the following categories of personal information from Professionals:

1.3 For Facilities

We may collect your personal information if you are using our Services in your capacity as a representative of your Facility (“Facility Representative”). When you use our Services in your capacity as a Facility Representative, we may collect:

1.4 For Website Visitors

When you visit our website, we may collect information you choose to submit to us including:

1.5 Information Automatically Collected by ShiftKey

Like other websites or apps, we also may collect and store information that is generated automatically as you navigate through our Services. We may collect:

2. How We Use Your Information

2.1 Information collected from Professionals and Facility Representatives

We will use the information you provide to us in your capacity as a Professional or Facility Representative (as listed in Section 1 above) for the following purposes:

2.2 Information collected from website visitors (including automatically-collected information)

We will use the information collected from website visitors, including automatically-collected information (as set forth in Section 1 above) for the following purposes:

2.3 Use of Artificial Intelligence

As part of providing our Services and a Platform, we may employ systems and technologies based on artificial intelligence or other algorithmic or automated processing (“AI”). AI may be leveraged to enhance our Products and/ or Services, to deliver better user experience, to improve operational efficiency and for other development purposes. We strive for high quality in AI outputs and to avoid errors or misleading information, we evaluate outputs for accuracy and reliability for each applicable use case, including using human review as appropriate. Your interaction with our use of AI depends on how you use our services. For example you may be communicating with a bot or AI agent when requesting certain information from ShiftKey.

We may also use AI systems to:

Where possible, your data will be aggregated, pseudonymized, or anonymized before use in AI model development. We respect your rights and, when required, will ask for your consent to use AI.

3. How We May Disclose Your Information

We may share your information with third parties outside of ShiftKey under the following circumstances:

Please bear in mind that whenever you voluntarily make your Personal Information available for viewing by third parties online or otherwise make your Personal Information publicly available – for example through comments and participation in forums or through email – that information can be seen, collected and used by others besides us. We are not responsible for any unauthorized third-party use of such information.

ShiftKey may use and disclose deidentified and/or aggregated data for any purpose. For example, we may disclose aggregated usage data from our Professionals or general demographic information of our Professionals to provide anonymous aggregated data to business partners about the volume of use on the Services and the opportunities in which Professionals are most interested.

4. How We Protect All of Our Data

ShiftKey seeks to use appropriate physical, technical, and administrative measures designed to protect Personal Information within our organization. However, no security system is impenetrable. We cannot guarantee the security of our database, nor can we guarantee that information supplied will not be intercepted while being transmitted over the Internet. You are responsible for keeping your account information and especially your login information confidential. We ask you not to share your login credentials with anyone.

5. Your Rights and Choices

5.1 Your Choices

Profile Information: You can review, update, change or delete the information you have provided to us (and that we continue to store) in your profile at any time through your profile settings. To disable your account or request assistance with profile changes please contact us directly at help@shiftkey.com.

Marketing Communications: You can click on the “unsubscribe” link located at the bottom of marketing emails you may receive from us to unsubscribe. Regardless of your choices regarding promotional communications and updates regarding content, we may send you transactional messages, administrative messages, service announcements, terms and conditions of your account, or other similar communications.

5.2 Your Privacy Rights

Your local laws may permit you to exercise certain rights with respect to the information we collect from and about you. Depending on your location, you (or an authorized agent acting on your behalf) may make certain requests related to your personal information, including that we:

Applicable law may provide you with the right not to be discriminated against for exercising your rights. Please note that we process “sensitive” personal information only for purposes of providing the Services that you request.

If you would like further information regarding your legal rights under applicable law or would like to exercise any of them, you may contact us at legal@shiftkey.com. We will take reasonable steps to verify your identity before responding to your request as required or permitted by applicable law. Please note your rights and choices vary depending upon your location, and certain information may be exempt from such requests under applicable law. In some circumstances, if you ask us to delete your information, you may no longer be able to access or use our Services. Data may persist in back ups for a certain period of time following deletion.

Your local jurisdiction may grant you the right to appeal the denial of a request. If you live in such a jurisdiction, you may exercise this right by emailing us at legal@shiftkey.com. We will respond within the legally required time period, including a written explanation of the results of your appeal.

5.3 Opt Out of Sale or Processing Personal Information for Targeted Advertising

Residents of certain states may opt out of the “sale” of their personal information or processing of their personal information for targeted advertising. We allow third parties on our Site to receive certain information such as cookies, IP address, device identifiers, browsing behavior and/or other activity to enable the delivery of targeted advertising about the Services to you. This activity is processing for targeted advertising and may be considered a sale under applicable law. If you would like to opt out of this activity, you may do so by clicking the link titled “Your Privacy Choices” in the footer of any of our sites.

You may still receive advertising on other sites and services, it just may not be tailored to your interests. Please note, if you use different browsers, devices, or services you will need to opt out on each browser or device where you want the choice to apply. In some cases, you may also be presented with a form field to complete, in those cases we ask for your email address or other information so we may add it to an appropriate suppression list.

6. Retention

We may retain certain information as required by law or for necessary business purposes. The length of time for which we retain information depends on the purposes for which we collect and use it and/or as required to comply with applicable laws. We are under no obligation to store such Personal Information and, to the extent permitted by law, disclaim any liability arising out of, or related to, the destruction of such Personal Information. We are under no obligation to destroy anonymized aggregate data.

7. Links

This Privacy Policy applies only to this Site and our Services. The Services may contain links to other sites or services. We are not responsible for the privacy policies or other practices employed by websites linked to, or from, our website nor the information or content contained therein. We encourage you to review the privacy statements of such third parties prior to using their sites or services. This Privacy Policy applies solely to information collected and used by our Services.

8. Our Policy Toward Children

The Services are not directed to children under the age of 13. We will not knowingly maintain personally identifiable information from or about anyone under 13. If we become aware that we have collected personally identifiable information from a user that is under the age of 13, then we will remove that child’s Personal Information from our files. If a parent or guardian learns his or her child has provided us with Personal Information, he or she should contact us at legal@shiftkey.com.

9. Visitors and Users from Outside of the United States

Our computer systems for the Services are currently governed by and operated in the United States, so your Personal Information will be processed by us in the United States, where data protection and privacy regulations may not offer the same level of protection as in other parts of the world, such as the European Union. ShiftKey makes no representation that the Services are governed by or operated in accordance with the laws of any other nation. ShiftKey does not offer services outside of the United States, although its website and application may be available in other countries. If you are a visitor from outside the United States, by using the Services, you understand that your Personal Information will be collected and processed in the United States and other countries where ShiftKey or its vendors operate, and acknowledge that your information may be subject to access by law enforcement and other government entities, in accordance with applicable laws. ShiftKey reserves the right to store this information in and outside of the United States and in locations not under our direct control (for example, co-located server facilities).

10. Changes and Updates

From time to time, we may change this Privacy Policy. We encourage you to periodically review our Privacy Policy for the latest information on our privacy practices. If we make any significant changes, we will notify you of such changes by posting the updated Privacy Policy on the Services and by updating the “Last Updated” date at the end of this Privacy Policy. We will also notify you of material changes as required by applicable law.

11. Contact Us

We welcome your feedback regarding this Privacy Policy. If you have any questions, comments, or concerns about either one, please contact us by email at legal@shiftkey.com.

12. California Privacy Notice

If you are a California resident, California law requires us to provide you with some additional information regarding how we collect, use, and disclose your “personal information” as defined in the California Consumer Privacy Act (“CCPA”). This California-specific information is in this Section 12; nothing in this Section 12 applies to any person outside of California.

We describe the categories of information we collect, our business purposes for collecting such information, the sources and uses of such information and the entities with which we disclose such information in the “Information ShiftKey Collects”, “How We Use Your Information,” and “How we May Disclose Your Information” sections of this Privacy Policy. We provide additional information required by the CCPA below.

12.1 Categories of Personal Information We Collect, Use and Disclose

Throughout this Policy, we discuss in detail the types of Information we collect from and about users and discuss how we use and disclose such information. The following are categories of personal information (as that term is defined under the CCPA) that we collect from California consumers and that we may, as discussed throughout this Policy, use and disclose for our business purposes:

12.2 How We Use These Categories of Personal Information

We and our service providers may use the categories of personal information we collect from and about you for the following business and commercial purposes (as those terms are defined in applicable law).

Examples of these types of uses are discussed in our main privacy policy in the “How We Use Your Information” section. We may also use the categories of personal information for compliance with applicable laws and regulations, and we may combine the information we collect (“aggregate”) or remove pieces of information (“de-identify”) to limit or prevent identification of any user or device. We may also disclose this information to third parties for legal, compliance or security purposes, or in connection with a business transfer, as described further in “How we May Disclose Your Information” above.

12.3 Sale/Sharing of Personal Information

The CCPA sets forth certain obligations for businesses that “sell” personal information or “share” personal information for cross-context behavioral advertising purposes. Under the CCPA, “sale” and “sharing” are defined such that they may include allowing third parties to receive certain information for advertising purposes. We “sell” or “share” the following categories of information to third-party advertising partners and vendors that support our advertising efforts (such as advertising analytics services):

If you would like to opt out of our use of your information for such purposes that are considered a “sale” or “sharing” for cross-context behavioral advertising purposes under California law, please visit the “Your Privacy Choices” link in the footer of our Site. Alternatively, if you have a legally-recognized browser-based opt out preference signal turned on via your device browser, we recognize such preference in accordance with applicable law. Please note that we do not knowingly sell the personal information of minors under 16 years of age. Please note, we do not use or disclose categories of information deemed to be “sensitive” under the CCPA (such as government identifiers and financial information) other than for disclosed and permitted business purposes for which there is not a right to limit under the CCPA.

12.4 Additional Privacy Rights

California residents may make certain requests about their personal information under the CCPA, subject to certain limitations and/or restrictions. Specifically, under California law you have the right to:

A consumer may use an authorized agent to submit a request on their behalf. When using an authorized agent, we require that you provide the authorized agent written permission to do so and verify their own identity and agent status with us. If you would like to designate an authorized agent to make a request on your behalf, please email us at legal@shiftkey.com. We have instituted a process for verifying that the person making an access, correction or deletion request is the consumer about whom we have collected information. As part of that process, we will ask you to provide certain information about yourself, which may include but is not limited to (depending on the type of request) your name, email address, and government identifiers. For requests to know and requests to delete, we will confirm receipt of the request within ten (10) days and provide information about how the business will process the request, and we will respond within 45 days with an option to extend an additional 45 days provided we give you notice. If you wish to exercise any of your rights under this section, you may submit your request by emailing us at legal@shiftkey.com.

12.5 Shine the Light

California Law permits customers who are California residents to request certain information once per year regarding our disclosure of “personal information” (as that term is defined under applicable California law) to third parties for such third parties’ direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.

12.6 Do Not Track

Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. DNT is a way for users to inform websites and services that they do not want certain information about their webpage visits collected over time and across websites or online services. Except as otherwise described herein with respect to legally required browser based opt outs, we do not recognize or respond to browser-initiated DNT signals, as there is no industry-wide framework for DNT signals. To learn more about Do Not Track, you can do so here.