Privacy Policy

Schedule Sizzle ("we", "us", "Schedule Sizzle") is operated by Chef Tony's Fresh Seafood, based in Rockville, Maryland, USA. This Privacy Policy explains what data we collect when you use the Schedule Sizzle service ("Service"), how we use it, who we share it with, and what choices you have. If you have questions, email support@schedulesizzle.com.

1. Who this policy covers

This policy applies to:

• Account holders — restaurant owners, managers, and admins who sign up for Schedule Sizzle.
• Staff users — employees of those restaurants whose information is entered into the Service by their employer (the Account holder).
• Visitors to schedulesizzle.com and our public marketing pages.

If you are a staff user whose information was entered by your employer, your employer is the data controller for that information. Contact them first with questions about your data; we will assist them in responding.

2. Information we collect

From Account holders during signup

• Name, email address, and password.
• Restaurant name and (optionally) location.
• Payment information, processed entirely by Stripe. We never see or store your card number.

About staff (entered by Account holders)

• Full name, position, hourly rate or rate override.
• Optional contact details: email, phone, address, emergency contact.
• Shifts assigned, hours worked as scheduled, time-off and shift-swap requests.

Operational data

• Schedule data, daily sales figures, labor budget settings.
• Logs of when schedules are published and by whom.
• Standard server logs (IP address, browser type, pages visited) for security and reliability.

3. How we use your information

• To provide the Service — show your schedule, calculate labor costs, send shift-request notifications, etc.
• To send transactional emails (welcome message, password resets, request approvals).
• To process payments and manage subscriptions.
• To detect and prevent abuse, fraud, or unauthorized access.
• To improve the Service through aggregate, non-identifying analytics.

We do not sell your personal information. We do not use staff data for advertising.

4. Who we share data with

We share data only with service providers who help us run Schedule Sizzle, and only the data they need to do their job:

• Supabase — database and authentication hosting.
• Stripe — payment processing.
• Resend — transactional email delivery.
• Netlify — website and application hosting.
• Cloudflare — DNS, CDN, and encrypted off-site backups.
• Anthropic — when you import a schedule from a photo or PDF, the file is processed by Anthropic's AI model. Files are not retained for training.

We may also disclose information if legally compelled (subpoena, court order) or to protect rights, property, or safety. If we are involved in a merger or acquisition, your information may be transferred to the successor entity.

5. Data retention

We keep your data for as long as your account is active. If you cancel, we retain your data for up to 90 days so you can re-activate without losing your schedules, then we delete or anonymize it. You can request immediate deletion by emailing support@schedulesizzle.com.

6. Security

We use standard industry safeguards: TLS encryption in transit, encryption at rest in Supabase, row-level security so each restaurant only sees its own data, hashed passwords, and encrypted off-site backups. No system is perfectly secure. If you suspect a breach, contact us immediately.

7. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your information.
• Export your information in a machine-readable format.
• Opt out of certain uses.

To exercise any of these rights — including data access, correction, deletion, or export requests — email legal@schedulesizzle.com. For California (CCPA) and EU/UK (GDPR) residents, the same rights apply; we will respond within the timeframe required by your law (typically 30–45 days).

8. Cookies

We use a small number of cookies and local-storage entries to keep you signed in and remember UI preferences (dark mode, sidebar collapse, onboarding progress). We do not use third-party advertising or cross-site tracking cookies.

9. Children

Schedule Sizzle is not intended for users under 16. We do not knowingly collect information from children. If you believe a child's information has been entered into the Service by their employer, contact us and we will delete it.

10. International users

Schedule Sizzle is operated from the United States. If you use the Service from outside the U.S., your information will be transferred to and processed in the U.S., where data protection laws may differ from your country's laws.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify Account holders by email and update the "Last updated" date above. Continued use of the Service after a change means you accept the revised policy.

12. Contact

• General questions — support@schedulesizzle.com
• Data access, deletion, or other privacy-rights requests — legal@schedulesizzle.com