Back to home
Privacy Policy
Your privacy matters. This Policy explains what data TapShift collects, how we use it, and the rights you have over it.
TapShift is a hospitality job-matching platform operating in Berlin, Germany. We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws. This Policy applies to all users of the TapShift platform.
1. Information We Collect
- Account details: name, email, display name, role (worker or business), and profile picture.
- Verification data: work eligibility status, identity verification status, and supporting documents you upload.
- Activity data: jobs posted, applications submitted, messages, reviews, ratings, and calendar events.
- Usage data: device type, browser, language preference, and interactions with platform features.
- Business listings: business name, type, contact name, phone, and location for businesses posting jobs.
2. How We Use Your Information
- To create and manage your account and verify your eligibility.
- To match workers with relevant job opportunities and businesses with suitable candidates.
- To facilitate messaging, scheduling, reviews, and notifications between users.
- To maintain platform safety, prevent fraud, and enforce our Terms and Community Guidelines.
- To improve TapShift's features, performance, and user experience.
- To comply with legal obligations under German and EU law.
3. How We Share Your Information
- With other users: limited profile information is visible to facilitate matching and communication (e.g., display name, role, rating).
- With service providers: trusted third parties that help us operate the platform (hosting, analytics, email delivery), bound by confidentiality.
- For legal reasons: when required by law, court order, or to protect the rights, safety, or property of TapShift and its users.
- TapShift does not sell your personal data to third parties.
4. Data Security
- We use industry-standard measures to protect your data, including encryption in transit and at rest.
- Row-level security limits access to your records based on your account and role.
- Access to personal data is restricted to authorized personnel who need it to operate the platform.
- No method of transmission or storage is completely secure; we cannot guarantee absolute security.
5. Data Retention
- We retain your data for as long as your account is active or as needed to provide our services.
- Verification documents are kept only as long as legally required and then deleted.
- Some data may be retained after account closure to comply with legal obligations or resolve disputes.
- You may request deletion of your data, subject to legal retention requirements.
6. Cookies & Tracking
- TapShift uses essential cookies to maintain your session and authentication.
- Analytics cookies help us understand usage patterns and improve the platform.
- You can manage cookie preferences through your browser settings.
- We do not use cookies for cross-site advertising tracking.
Your GDPR Rights
- Access: request a copy of the personal data we hold about you.
- Rectification: request correction of inaccurate or incomplete data.
- Erasure: request deletion of your data ('right to be forgotten').
- Restriction: request that we limit processing of your data.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interests.
- Withdraw consent: withdraw consent for processing at any time.
To exercise any of these rights, contact us through the in-app support chat. We will respond within one month, as required by the GDPR.
Last updated: September 2026 · This Privacy Policy is governed by the GDPR and the data protection laws of the Federal Republic of Germany.