Human API
Worker privacy addendum
Effective October 12, 2026
This addendum adds to our privacy policy for people who take jobs through TeamShift. Where the two differ for job data, this addendum controls.
1. What we collect
| Data | When we collect it | Why |
|---|---|---|
| Name, phone number, email, the areas you work in | When you sign up or are added to a roster | To send offers and contact you about jobs |
| Identity check result | At sign-up for network jobs | To confirm you are who you say you are |
| Background check result and date | Only for property-access jobs, with your written permission | To decide whether you can take those jobs |
| Insurance certificate and expiry date | Only for jobs that need insurance | To confirm you're covered |
| Payout status | When you set up payouts | To pay you. Our payment processor holds your tax ID and bank details. We don't store them. |
| Location at the moment you capture or upload proof | Only while you're using a job's capture page or sending proof, after your phone asks your permission | To confirm the job was done in the right place |
| Photos, notes and photo metadata (capture time, GPS, device model) | When you send proof | To verify the job and show the result to the customer |
| Job history, ratings and audit results | As you take jobs | To route offers, set tiers and handle disputes |
| Job texts and replies | When you text with us about a job | To run the job and keep a record of your consent |
Identity checks and face scans. If the identity check compares a selfie with your ID, our identity provider creates a face scan only to make that match. We ask for your written consent first. Neither we nor the provider keep the scan longer than 30 days after the check, and it's never used for anything else.
We never track your location in the background or when you aren't on a job. Turning off location permission means you'll use the photo-only fallback for proof, which some jobs don't accept.
2. Who sees it
- The business that booked the job sees your proof photos and notes, the capture time and place for that job, your tier and a pseudonymous worker ID. It doesn't see your phone number, email, home address, background check, insurance details or other jobs. For roster jobs, the business that added you already knows who you are and sees your name.
- Our service providers process data for us under contracts that limit how they use it: our payment processor, background check and identity providers, messaging provider and hosting and storage providers.
- Anyone checking a job receipt sees the pseudonymous worker ID and tier, photo fingerprints and the verification result. A receipt never contains your name or contact details.
- Authorities, when the law requires it or someone's safety is at risk.
We don't sell your data, share it for targeted advertising or sell location data to anyone. We don't run face recognition on job photos.
3. How long we keep it
| Data | How long |
|---|---|
| Proof photos | 12 months after the job is completed, then deleted |
| Precise location (GPS from capture and photo metadata) | 12 months after the job. After that, receipts keep only the ZIP code and whether the photo was taken within the job's radius. |
| Photo fingerprints (hashes) and receipts | 7 years, for tax, accounting and dispute records. A hash can't be turned back into the photo. |
| Job texts and replies | 12 months after your last job |
| Proof of your text consent and opt-out | 5 years after you opt out or your account closes |
| Background check result | While your account is active plus 2 years, then deleted. We only receive a copy of the full report when we need it to tell you about a decision. |
| Insurance certificates | While your account is active plus 2 years |
| Payout and tax records | 7 years |
| Account profile, ratings and job history | While your account is active, then deleted or de-identified within 90 days of closing it, except what this table says we keep longer |
We keep data longer only when there's an open dispute, a legal claim, a fraud investigation or a legal obligation, and only as long as that lasts.
Copies a business downloads or receives through the API are in that business's control. We ask businesses to follow the same retention periods, but their own policies apply to their copies.
4. Your choices and rights
You can ask to see, correct, download or delete your data by emailing team@teamshift.io. We'll answer within 30 days. Some data we have to keep, such as payout records, and we'll tell you what and why. Depending on your state, you may have more rights, including to appeal a decision about your request. Email us and we'll explain how.
You can withdraw location permission in your phone settings at any time, and opt out of job texts by replying STOP. See the job text consent terms.
5. Security
We protect job data with encryption in transit, access limited to people who need it, and audit logs. Photos are kept in private storage that only the business that booked the job and our staff who need it can reach. If a breach affects your data, we'll tell you as the law requires.