Privacy Policy
Last updated: November 8, 2026
Cedar Shifts ("Cedar Shifts", "we", "us") makes staff scheduling software for restaurants and cafes. This Privacy Policy explains what information Cedar Shifts collects, how we use it, who we share it with and the choices you have. It covers cedarshifts.com, app.cedarshifts.com, the Cedar Shifts iPhone app and the emails and text messages Cedar Shifts sends.
Who this applies to
- Managers and owners who create a Cedar Shifts account for their restaurant.
- Employees whose restaurant adds them to a schedule in Cedar Shifts.
- Visitors to our website.
When a restaurant uses Cedar Shifts to schedule its staff, the restaurant decides which employee information to enter. We process that information on the restaurant's behalf to provide the service.
Information we collect
- Account information: name, email address and password, or your Google account's name and email if you sign in with Google.
- Restaurant information: business name, locations, roles, shifts, scheduling rules and settings.
- Employee information: name, email address, mobile phone number, roles and training, availability, time-off requests, assigned shifts and replies to schedule messages.
- Messages: the content of emails and text messages sent through Cedar Shifts, and replies such as STOP or HELP.
- Technical information: sign-in cookies that keep you logged in, basic logs (such as IP address, browser type and the time of a request) and privacy-friendly website analytics.
- The iPhone app: if you turn on notifications, a device token from Apple that lets us send them to that phone. Your shifts are kept on the phone so you can read them offline. Adding a shift to your calendar happens on the phone; we never read your calendar.
How we use information
- To build, publish and update schedules, and to cover call-outs and open shifts.
- To send employees their shifts, schedule changes and requests for availability by email or text message.
- To run the in-app scheduling assistant, which answers questions and suggests changes using the restaurant's scheduling data. What you ask it, with the schedule, staff names and rules it needs to answer, is sent to an AI model (through OpenRouter, to Google or Anthropic) only when you use it.
- To keep accounts secure, prevent abuse, fix problems and improve Cedar Shifts.
- To respond to support requests and to comply with the law.
Connecting another scheduling app
If you connect another scheduling app (7shifts today), Cedar Shifts uses the access token you paste once, to read your locations, departments, team (names, emails, mobile numbers, active or not), roles, the last 8 weeks of shifts and approved time off. The token is not stored. You can delete it in that app afterwards, and Cedar reminds you to.
What we read is used only to set up your restaurant in Cedar Shifts, and is deleted on request like the rest of your data.
Text messages (SMS)
Cedar Shifts sends text messages to employees only after they agree to receive them. A manager asks the employee for permission, in person, before adding the employee's mobile number. Messages are about the employee's work schedule only: shift schedules, shift changes and availability requests. Message frequency varies. Message and data rates may apply.
Reply STOP to any message to stop receiving texts, or HELP for help. You can also email evan@cedarshifts.com.
We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Mobile numbers and text-message consent are never shared with third parties or affiliates for their own marketing or promotional purposes.
Who we share information with
We do not sell personal information. We share it only as needed to run Cedar Shifts:
- Within your restaurant: managers see their staff's information. Employees see their own schedule and the information their restaurant chooses to publish.
- Service providers who process data for us under their own privacy and security terms: Cloudflare (hosting, database, email delivery and analytics), Google (Google sign-in and legacy Firebase hosting), Twilio (text message delivery) and OpenRouter and the AI model providers it routes to (the scheduling assistant).
- Legal reasons: when required by law, or to protect the rights, safety or property of our users or Cedar Shifts.
- Business transfers: if Cedar Shifts is merged, acquired or sells its assets, information may transfer as part of that deal, and this policy will continue to protect it.
How long we keep information
We keep information for as long as the restaurant's account is active, and as needed to provide the service. When a restaurant closes its account, or asks us to delete an employee's information, we delete it within a reasonable time, unless we must keep it to comply with the law.
Security
Information is encrypted in transit, access is limited to the people who need it, and each restaurant's data is kept separate from other restaurants. No system is perfectly secure, so please use a strong password and tell us right away if you think your account has been misused.
Your choices
- Reply STOP to stop text messages at any time.
- Ask your manager to update or remove your information, or email us.
- Delete your account yourself, in the app or on the web, from Settings > My account > Delete account. Your sign-in is deleted at once. A restaurant you own alone is deleted with it; a restaurant you work at keeps its own record of your shifts.
- Email evan@cedarshifts.com to access, correct or delete your information. Depending on where you live, you may have other rights, and we will honor them as the law requires.
Children
Cedar Shifts is a workplace tool and is not directed to children under 13. We do not knowingly collect information from children under 13.
Changes to this policy
We may update this policy as Cedar Shifts changes. We will post the new version here and update the date at the top. If a change materially affects how we use information we already have, we will tell account holders before it takes effect.
Contact
Questions about privacy at Cedar Shifts: evan@cedarshifts.com.