Privacy Policy

1. Introduction

DishwasherHero+ ("Company," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our on-demand hospitality staffing platform, website, mobile applications, and related services (collectively, the "Services").

By using our Services, you consent to the data practices described in this Privacy Policy. If you do not agree with our practices, please do not use our Services.

2. Information We Collect

2.1 Information from Businesses

When businesses register and use our platform, we collect:

• Company Information: Legal business name, trade name (DBA), business address, phone number, and website
• Contact Information: Name, job title, email address, and phone number of authorized contacts
• Tax Information: Employer Identification Number (EIN) for US businesses; Business Number (BN) for Canadian businesses
• Billing Information: Payment card details, billing address, and banking information for ACH/EFT payments (processed securely via Stripe)
• Staffing Information: Shift requirements, location details, job descriptions, and historical staffing data
• Enterprise Challenges: Information about staffing challenges and operational needs submitted through inquiry forms
• Communication Records: In-app messages, emails, chat transcripts, and call recordings

2.2 Information from Workers

When workers register and use our platform, we collect:

• Personal Identification: Full legal name, date of birth, home address, phone number, and email address
• Government-Issued ID: Driver's license, state/provincial ID, or passport for identity verification
• Tax Identification:
  • United States: Social Security Number (SSN) for W-2 employment and tax reporting
  • Canada: Social Insurance Number (SIN) for T4 employment and tax reporting
• Work Authorization: I-9 documentation (US), work permit or permanent resident card (Canada), and proof of legal eligibility to work
• Banking Information: Bank account and routing numbers for direct deposit payments
• Employment History: Previous work experience, certifications, food handler permits, and references
• Background Check Information: Consent forms and results from criminal background screening
• Profile Photo: Photo for identification and profile purposes
• Shift Data: Shift history, performance metrics, ratings, and availability preferences

2.3 Event Registration Information

For event staffing registrations, we collect:

• Full name, email, and phone number
• Company name (for clients)
• Positions interested in or positions needed
• Years of experience and availability
• Staff count requirements

2.4 Automatically Collected Information

When you use our Services, we automatically collect:

• Device Information: Device type, operating system, browser type, and unique device identifiers
• Log Data: IP address, access times, pages viewed, and referring URLs
• Location Data: Approximate location based on IP address; precise location when enabled for shift check-in/check-out
• Usage Data: Features used, interactions with the platform, and navigation patterns

3. How We Use Your Information

We use the information we collect to:

3.1 Provide and Improve Services

• Match workers with businesses based on skills, availability, and location
• Process and manage shift bookings and schedules
• Facilitate communication between businesses and workers
• Improve platform functionality and user experience

3.2 Employment and Payroll

• Process payroll and direct deposit payments
• United States: Withhold taxes, file W-2 forms, and comply with IRS requirements
• Canada: Remit CPP/QPP, EI contributions, issue T4 slips, and comply with CRA and Revenu Québec requirements
• Administer workers' compensation claims
• Verify work eligibility and maintain I-9 records (US)

3.3 Safety and Compliance

• Conduct background verification checks
• Verify identity and work authorization
• Investigate and prevent fraud or misconduct
• Comply with legal obligations and regulatory requirements

3.4 Communications

• Send shift confirmations, reminders, and updates via SMS and email
• Provide customer support and respond to inquiries
• Send payment notifications and receipts
• Communicate platform updates, policy changes, and important announcements

3.5 Marketing (with consent)

• Send promotional content about new features and services
• Personalize marketing communications based on your interests
• Conduct surveys and gather feedback

4. Third-Party Services

We work with trusted third-party service providers to operate our platform. These providers have access to your information only to perform specific tasks on our behalf and are obligated to protect your data:

4.1 Payment Processing

Payment processing is handled through our external booking system. Your payment information is processed securely through PCI-DSS compliant payment processors and is not stored on our servers.

4.2 Communications

Twilio powers our SMS notifications for shift updates, confirmations, and payment alerts. See Twilio's Privacy Policy.

4.3 Analytics

• Google Analytics 4: Website and app usage analytics. See Google's Privacy Policy.

4.4 Marketing and Advertising

• Facebook Pixel: Advertising conversion tracking and audience building
• LinkedIn Insight Tag: B2B marketing analytics and conversion tracking

4.5 Customer Support

Freshworks provides our live chat and customer support tools.

4.6 Mapping and Location

Mapbox provides location visualization for service areas and shift locations.

4.7 Background Verification

We partner with consumer reporting agencies to conduct background checks in compliance with the Fair Credit Reporting Act (FCRA) in the US and applicable provincial legislation in Canada.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Maintain session state, authentication, and security
• Functional Cookies: Remember your preferences (e.g., sidebar state, language settings)
• Analytics Cookies: Understand how users interact with our platform
• Marketing Cookies: Deliver relevant advertisements (with your consent)

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.

6. Employment Records Handling

6.1 United States

For US workers, we maintain employment records including:

• W-2 forms and annual tax statements
• I-9 Employment Eligibility Verification forms and supporting documents
• Payroll records (wages, hours, deductions, tax withholdings)
• Background check authorizations and summary reports

Records are retained per IRS requirements (minimum 4 years for tax records) and Department of Labor regulations.

6.2 Canada

For Canadian workers, we maintain employment records including:

• T4 slips and annual tax statements
• Work permit or authorization documents
• Payroll records (wages, hours, CPP/QPP, EI contributions)
• Background check authorizations and results

Records are retained per CRA requirements (minimum 6 years for tax and payroll records) and applicable provincial employment standards.

7. Data Sharing and Disclosure

We may share your information in the following circumstances:

7.1 With Businesses and Workers

• Worker profiles (name, photo, skills, ratings) are shared with businesses for matching purposes
• Business information (location, job requirements) is shared with workers for shift acceptance
• Contact information is shared as necessary to coordinate shifts

7.2 With Service Providers

We share information with third-party vendors who perform services on our behalf (payment processing, communications, analytics, background checks).

7.3 With Government Agencies

We disclose information as required by law, including:

• Tax authorities (IRS, CRA, Revenu Québec) for employment tax reporting
• Workers' compensation boards for claims processing
• Law enforcement in response to valid legal process

7.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any change in ownership or control.

7.5 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

8. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Role-based access with multi-factor authentication for employees
• Secure Infrastructure: Cloud hosting with SOC 2 Type II certified providers
• Regular Audits: Periodic security assessments and penetration testing
• Incident Response: Documented procedures for detecting and responding to security incidents

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Your Privacy Rights

9.1 United States

Depending on your state of residence, you may have rights to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your information (subject to legal retention requirements)
• Portability: Receive your data in a portable format
• Opt-Out: Opt out of the sale of personal information (note: we do not sell data)

California Residents (CCPA/CPRA): California residents have additional rights under the California Consumer Privacy Act. You may submit requests to privacy@dishwasherhero.com.

9.2 Canada

Under PIPEDA and provincial privacy laws, you have rights to:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete information
• Withdraw Consent: Withdraw consent for certain uses (subject to legal obligations)
• File Complaints: File complaints with the Office of the Privacy Commissioner of Canada or provincial commissioners

Quebec Residents (Law 25): Quebec residents have enhanced privacy rights under Law 25, including the right to data portability and to be informed about automated decision-making. You may file complaints with the Commission d'accès à l'information du Québec.

10. Data Retention

We retain your information based on the following schedule:

You may request deletion of your data by contacting us. Some data must be retained for legal compliance.

11. International Data Transfers

Your information may be processed and stored in both the United States and Canada. We ensure appropriate safeguards are in place for cross-border transfers, including:

• Data processing agreements with service providers
• Compliance with PIPEDA requirements for cross-border data flows
• Standard contractual clauses where applicable

12. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a child under 18, we will delete it promptly.

13. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature. Our platform does not currently respond to DNT signals. We recommend managing your cookie preferences directly through our platform or your browser settings.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our platform at least 30 days before taking effect. The "Last updated" date at the top of this policy indicates when it was last revised.

Your continued use of our Services after changes become effective constitutes acceptance of the revised Privacy Policy.

15. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

DishwasherHero+ Privacy Team
Email: privacy@dishwasherhero.com
General Support: support@dishwasherhero.com
Phone: +1 888-601-1615
Address: 1000 de la Gauchetière W, Montreal, QC H3B 4W5, Canada

For California-specific requests: ccpa@dishwasherhero.com

See also our Terms of Service for additional terms governing your use of our platform.