Privacy Policy

Last updated: February 4, 2026

WhenWorks is operated by Second Shift Ventures LLC, a software company based in Washington State, USA ("we," "us," or "our"). We build productivity tools to help teams collaborate better. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our scheduling service at www.whenworks.cc.

1. Information We Collect

Information You Provide

  • Account information (email address, name) when you register
  • Poll data (titles, descriptions, dates, times, and locations) when you create polls
  • Response data (your name and availability selections) when you respond to polls
  • Payment information when you subscribe to WhenWorks Pro (processed by Stripe)
  • Communication data when you contact us for support

Information Collected Automatically

  • IP address and approximate location
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent on our service
  • Referring website or source

Calendar Integration Data

If you connect Google Calendar or Microsoft Outlook (Pro feature), we access calendar event data solely to add finalized meeting times to your calendar. We do not read, store, or analyze your existing calendar events.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our scheduling service
  • Process subscriptions and send billing-related communications
  • Send poll invitations and notifications on your behalf
  • Send technical notices, security alerts, and support messages
  • Respond to your comments and questions
  • Analyze usage patterns to improve our service
  • Protect against fraudulent, unauthorized, or illegal activity
  • Display relevant advertisements (free tier only)

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your data under the following legal bases:

  • Contract: To provide the service you requested when creating an account or poll
  • Legitimate interests: To improve our service, prevent fraud, and ensure security
  • Consent: For optional features like calendar integration and marketing communications
  • Legal obligation: To comply with applicable laws and regulations

4. Information Sharing and Third-Party Services

We do not sell your personal information. We share data with the following service providers who assist in operating our service:

  • Supabase: Database hosting and authentication (data stored in the United States)
  • Vercel: Website hosting and content delivery
  • Stripe: Payment processing for Pro subscriptions
  • Resend: Transactional email delivery (poll invitations, notifications)
  • Google: OAuth authentication and Calendar integration (if enabled)
  • Microsoft: OAuth authentication and Outlook Calendar integration (if enabled)
  • Google AdSense: Advertising on free tier (subject to Google's privacy policy)

We may also disclose information to comply with legal obligations, protect our rights, or respond to lawful requests from public authorities.

5. International Data Transfers

Your information may be transferred to and processed in the United States and other countries where our service providers operate. These countries may have different data protection laws than your country of residence. By using our service, you consent to such transfers. For EEA users, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including encryption in transit (TLS) and at rest, secure authentication, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Maintain your session and authentication state
  • Remember your preferences
  • Understand how you use our service (analytics)
  • Deliver relevant advertisements (free tier)

You can control cookies through your browser settings. Disabling certain cookies may limit your ability to use some features of our service.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Poll data is retained until you delete it or your account. After account deletion, we may retain certain information for up to 30 days for backup purposes and as required by law.

9. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal information
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data ("right to be forgotten")
  • Portability: Request your data in a portable format
  • Objection: Object to processing based on legitimate interests
  • Restriction: Request restriction of processing
  • Withdraw consent: Withdraw consent at any time for consent-based processing

To exercise these rights, contact us at support@secondshiftventures.com.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know: What personal information we collect, use, and disclose
  • Right to delete: Request deletion of your personal information
  • Right to opt-out: We do not sell personal information
  • Right to non-discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, contact us at support@secondshiftventures.com. We do not sell your personal information as defined by the CCPA.

11. Children's Privacy

Our service is not intended for children under 16 (or under 13 in the United States). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page, updating the "Last updated" date, and sending you an email if you have an account. Your continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

Second Shift Ventures LLC
Washington State, USA
Email: support@secondshiftventures.com

For EEA users with unresolved concerns, you have the right to lodge a complaint with your local data protection authority.