Privacy policy
Last updated October 16, 2026
Staffed is a shift scheduling service made by Zabtek. Organizations (our customers) use it to post shifts for their events, and their staff and volunteers use it to request and work those shifts. This policy explains what we collect and what we do with it, in plain language.
Who is responsible for what
Each organization decides who to invite and what to post, and is responsible for the information it puts into Staffed about its people. Zabtek runs the service and processes that information on the organization's behalf. If you are a staff member or volunteer and want your information changed or removed, you can ask the organization, or email us and we will help.
What we collect
- Account details: name, email address, and a password (stored only as a one-way hash). Optionally a phone number.
- Scheduling information: the shifts you request, are approved for or decline, and any notes a manager adds.
- Hours, only when an organization turns on hours tracking for paid staff: check-in and check-out times.
- Billing details for organizations that pay. Card payments are handled by Stripe; we never see or store full card numbers.
- Technical information: IP address and browser type for security, sign-in protection and troubleshooting.
- Feedback you choose to send us from inside the app.
How we use it
- To run the service: show shifts, process requests and approvals, and send the emails you expect (invites, confirmations, reminders, announcements).
- To keep accounts secure and prevent abuse.
- To bill organizations that choose a paid plan.
- To improve Staffed based on feedback, and to understand how people find and use our website.
We do not sell personal information, and we do not use it for advertising.
Who we share it with
Only the service providers we need to run Staffed: our hosting provider, our email delivery provider, Stripe for payments, and Google for website analytics. Each may only use the information to provide their service to us. We may also disclose information if the law requires it.
You can turn off announcement and new-shift emails from the link at the bottom of any email or from your profile. Emails about shifts you are working, like confirmations, cannot be turned off while you have an account.
Cookies
Inside the app, Staffed uses one cookie to keep you signed in and to protect forms against forgery. We do not use advertising cookies. The analytics cookies described below are set only on our website and the app's pricing and checkout pages.
Analytics
On staffedapp.com, and on the pricing, sign-up and checkout pages of the app, we measure visits and which buttons are used so we can improve the site. We use two tools: Umami, which we run ourselves and which sets no cookies, and Google Analytics, which sets cookies to count returning visitors and is provided by Google. Google Analytics collects things like the pages you view, how you arrived, your general location and device, but not your name or email. We have turned off Google's advertising features for it. You can opt out with your browser's privacy settings or Google's opt-out tool.
Once you are signed in to the app, none of this runs: the schedules, shifts and people inside your organization are never sent to analytics tools.
How long we keep it
We keep information while the organization's account is active. When an organization closes its account, or asks us to, we delete its information within 30 days, apart from billing records we must keep by law.
Security
Information travels over encrypted connections, passwords are hashed, every organization's data is kept separate, and access by our own team is limited and logged.
Children
Staffed is not directed to children under 13, and organizations should not invite them.
Changes and contact
If we change this policy in a way that matters, we will tell organization admins by email before it takes effect. Questions or requests: support@zabtek.com.