Privacy Policy

Last Updated: March 12, 2026

HumanShift Workforce, Inc. ("HumanShift," "Company," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes the types of information we collect from and about you when you access or use the HumanShift platform located at humanshift.com and all associated web applications, APIs, and services (collectively, the "Platform"), the purposes for which we use that information, and the circumstances under which we may share it with third parties. By creating an account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy in its entirety.

1. INFORMATION WE COLLECT

1.1 Authentication Data. When you register for an account using Google Single Sign-On ("SSO"), we receive your full name, email address, and profile photograph (if available) directly from Google's OAuth 2.0 infrastructure. We do not receive, access, or store your Google account password at any time.

1.2 Profile and Onboarding Data. During the onboarding process and through continued use of the Platform, you may voluntarily provide additional personal information, including your previous job title, employer name, professional background and work history, target trade industry and career interests, emotional baseline scores derived from self-reported wellness assessments, resume or curriculum vitae content submitted for automated skill translation, and contact information such as your phone number and communication preferences. This data is collected solely to facilitate the career-transition services described in our Terms of Service.

1.3 Usage and Interaction Data. We automatically collect limited technical and behavioral data to operate, maintain, and improve the Platform. This includes pages visited and features accessed, peer mentorship session participation records, certification roadmap progress, browser type, device information, and general geographic location at the country level only. We do not collect precise geolocation data, device identifiers for advertising purposes, or any data from third-party tracking networks.

2. HOW WE USE YOUR INFORMATION

2.1 Skill Translation and Career Matching. Your professional background, resume content, and profile data are processed by our proprietary skills engine (powered by Anthropic's language models) to generate skill mappings, translated trade profiles, and competency assessments. Your target industry preferences and translated skill profile are used to surface relevant apprenticeship listings and employment opportunities from our employer partners.

2.2 Peer Mentorship Facilitation. Relevant portions of your profile data — including your previous professional role, target trade sector, and transition progress — are made visible to other Platform Users for the purpose of facilitating mentor-mentee matching and peer support interactions within the HumanShift community network.

2.3 Platform Improvement. We use aggregated, anonymized usage data to analyze feature adoption, diagnose technical issues, optimize Platform performance, and inform the development of new capabilities. Individual-level data is never used for these analytical purposes without first being stripped of all personally identifiable information.

2.4 Communications. We may send you transactional emails relating to your account status, placement updates, security alerts, or material changes to our Terms of Service or this Privacy Policy. We do not send unsolicited marketing emails, and you may manage your communication preferences at any time through your account settings.

3. DATA SECURITY

HumanShift implements industry-standard administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. All data transmitted between your device and our servers is encrypted using HTTPS/TLS protocols. Database access is governed by Row Level Security ("RLS") policies enforced at the database layer, ensuring that authenticated Users may only access their own records. Authentication tokens are managed via secure, HTTP-only cookies that are not accessible to client-side scripts. Our infrastructure is hosted on Vercel and Supabase, both of which maintain SOC 2 Type II compliance certifications. Notwithstanding these measures, no method of electronic transmission or storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security against all threats.

4. THIRD-PARTY DATA SHARING

HumanShift does not sell, rent, lease, or trade your personal data to recruiters, employers, data brokers, or any other third party without your explicit, informed consent. We share limited personal information only in the following narrowly defined circumstances.

4.1 Employer Placement (Consent-Based). When you voluntarily initiate an application to a specific apprenticeship or employer listing through the Platform, your translated trade profile, relevant skill competencies, and contact information are shared with that specific employer for the sole purpose of evaluating your candidacy. This sharing occurs only after you explicitly submit an application and may be revoked by withdrawing your application at any time prior to the employer's final decision.

4.2 Automated Processing. Professional background content submitted for skill mapping is transmitted to our processing provider (Anthropic) for analysis. This data is handled in strict accordance with Anthropic's data processing agreement and is not retained by Anthropic beyond the duration of the processing request. Your data is not used to train, fine-tune, or otherwise improve Anthropic's models.

4.3 Legal Obligations. We may disclose your personal information if required to do so by applicable law, subpoena, court order, governmental regulation, or other valid legal process. In such cases, we will make reasonable efforts to notify you of the disclosure unless prohibited by law from doing so.

5. DATA RETENTION AND DELETION

We retain your personal data for the duration of your active account. Upon account deletion — whether initiated by you through your Profile Settings, by contacting us at privacy@humanshift.com, or by administrative action — we will permanently and irreversibly delete all personal data associated with your account within thirty (30) calendar days, except where longer retention is required by applicable law, regulatory obligation, or the resolution of pending legal disputes. Aggregated, anonymized data that cannot be used to identify you may be retained indefinitely for statistical and analytical purposes.

6. YOUR RIGHTS

Depending on your jurisdiction of residence, you may be entitled to exercise certain rights with respect to your personal data. These rights may include the right to access, review, and obtain a copy of the personal data we hold about you; the right to request correction of inaccurate or incomplete personal data; the right to request deletion of your personal data, subject to applicable legal exceptions; the right to receive your personal data in a structured, commonly used, and machine-readable format for the purpose of data portability; the right to withdraw consent for data processing at any time, where processing is based on consent; and the right to lodge a complaint with your local data protection supervisory authority. To exercise any of these rights, please contact us at privacy@humanshift.com. We will acknowledge your request within seven (7) business days and fulfill it within thirty (30) calendar days, unless an extension is required by the complexity of the request.

7. COOKIES AND TRACKING TECHNOLOGIES

HumanShift uses strictly essential cookies for authentication and session management. These cookies are necessary for the Platform to function and cannot be disabled without impairing core functionality. We do not deploy advertising cookies, social media tracking pixels, or third-party behavioral analytics scripts. Where analytics are employed, we use privacy-respecting, cookieless collection methods that do not track individual Users across websites or create advertising profiles.

8. CHILDREN'S PRIVACY

The Platform is not intended for, and is not directed at, individuals under the age of eighteen (18). We do not knowingly collect, solicit, or process personal information from minors. If we become aware that we have inadvertently collected personal data from a minor, we will take prompt steps to delete such data from our systems. If you believe that a minor has provided personal information to us, please contact us immediately at privacy@humanshift.com.

9. INTERNATIONAL DATA TRANSFERS

Your personal data may be processed and stored in the United States or other jurisdictions where our infrastructure providers maintain facilities. By using the Platform, you consent to the transfer of your personal information to jurisdictions that may have data protection laws that differ from those of your country of residence. Where such transfers occur, we ensure that appropriate safeguards are in place in accordance with applicable data protection regulations.

10. CHANGES TO THIS POLICY

HumanShift reserves the right to modify this Privacy Policy at any time. When we make material changes, we will provide notice via email to the address associated with your account or through a prominent notification on the Platform no fewer than thirty (30) days prior to the effective date of such changes. Your continued use of the Platform following the effective date of any modification constitutes your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to remain informed about how we protect your data.

11. CONTACT INFORMATION

For all privacy-related inquiries, data access requests, or concerns regarding this Privacy Policy, please contact HumanShift Workforce, Inc. at privacy@humanshift.com or through our Support Portal.