Privacy Policy
Last updated: [DATE]
This policy explains what information Pass the Shift (“we”) collects, how we use it, and your choices.
1. Who we are
Pass the Shift is operated by Discipline Dynamics LLC, a South Carolina limited liability company, [ADDRESS], [EMAIL].
2. Free site (no accounts)
The free site does not require an account. We collect:
- Questions and tool inputs you type into the summary and ask-a-question tools (e.g., textbook title, chapter, your question).
- IP address and basic request data (browser type, time), used briefly for rate limiting, abuse prevention, and security. [Retention: e.g., deleted or aggregated within 24–48 hours.]
- Aggregate traffic statistics through Cloudflare Web Analytics, which is designed to be cookie-less and not to track individuals across sites. We do not use advertising cookies or sell ads based on your activity [update if this changes].
3. Paid Portal (when launched)
If you subscribe, we also collect your name, email, account credentials, subscription status, and billing history. Payment card details are collected and stored by our payment processor ([Stripe/other]) under its own privacy policy; we receive only limited information (e.g., last four digits, expiration, billing ZIP/state for tax).
4. How tool inputs are processed
Your tool inputs are sent to a third-party AI provider ([PROVIDER]) to generate a response. [Attorney/developer: confirm provider terms — e.g., no training on API data, retention period.] Do not enter personal, sensitive, or patient information.
5. No patient information (PHI)
Never enter information that could identify a patient. We are not a HIPAA covered entity or business associate, and the Site is not designed to receive PHI. We may delete inputs that appear to contain PHI.
6. How we use information
To operate and secure the Site; generate tool responses; prevent abuse; understand overall usage; provide and bill subscriptions; respond to you; and comply with law.
7. How we share information
We do not sell your personal information and do not share it for cross-context behavioral advertising. We share it only with service providers who help run the Site (hosting/CDN: Cloudflare; AI provider; payment processor; email provider), when required by law or to protect rights and safety, or in a business transfer (e.g., if the Site is sold), subject to this policy.
8. Retention
Request logs: [X days]. Tool inputs: [not stored by us / stored X days for abuse review]. Account and billing records: as long as your account is active and as required for tax/accounting (generally [7] years for transaction records).
9. Children
The Site is for users 18 and older. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13 (Children’s Online Privacy Protection Act). If you believe a child has given us information, contact us and we will delete it.
10. Your choices and rights
You may request access to, correction of, or deletion of your personal information by emailing [EMAIL]. Subscribers may cancel at any time and request account deletion. Depending on where you live, you may have additional rights under state privacy law; we will honor applicable requests. South Carolina does not currently have a comprehensive consumer privacy statute [verify at launch]. [Attorney: confirm which other states’ laws apply at this size — most have revenue/volume thresholds the Site likely won’t meet.]
11. Cookies
The free site uses only strictly necessary technologies (e.g., security/bot checks such as Cloudflare Turnstile). The Portal will use essential session cookies to keep you logged in. If we add non-essential cookies (analytics or marketing), we will update this policy and ask for consent where required.
12. Security
We use reasonable safeguards (HTTPS, server-side API keys, limited data collection). No method is 100% secure. If a security breach involving personal information occurs, we will notify affected individuals as required by law, including S.C. Code § 39-1-90.
13. Changes
We will post changes here with a new “Last updated” date and notify subscribers of material changes by email.
14. Contact
Discipline Dynamics LLC, [ADDRESS], [EMAIL]