Privacy Policy
VestaFide, Inc. ("VestaFide," "we," "us," or "our"), a subsidiary of CrossroadsAutomation.ai, operates the VestaFide platform, including the website at vestafide.com and associated web applications, mobile applications, and APIs (collectively, the "Platform"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use the Platform.
By accessing or using the Platform, you agree to this Privacy Policy. If you do not agree, please do not use the Platform.
1. Information We Collect
Account Information. When you create an account, we collect your name, email address, phone number, and password. For employer accounts, we also collect business name, location address, and industry type. For gig worker accounts, we may also collect skill certifications, availability preferences, geographic radius, and rate expectations.
Employment and Workforce Data. Employers who use the Platform provide information about their employees, including names, phone numbers, email addresses, job titles, skills, certifications, shift schedules, and availability. This data is provided by the employer and governed by the employer's own relationship with their employees.
Platform Activity Data. We collect information generated through your use of the Platform, including shift offer events (sent, accepted, declined, timed out), shift attendance records (on-time arrivals, no-shows, lateness), schedule data (published schedules, day-off requests, shift swaps), ratings and reviews provided by employers after completed shifts, bonus and incentive transaction data, and SMS and notification interaction data (delivery status, response timestamps).
Behavioral Signals and Scores. The Platform uses an exponentially weighted moving average (EWMA) learning engine to compute behavioral signals from your activity. These include acceptance rate (how often you accept shift offers), reliability score (show-up rate, punctuality), fairness score (offer distribution relative to peers), trust score (composite reliability metric for marketplace participants), and preference patterns (inferred shift-type and time-of-day preferences). These signals are derived from your Platform activity and are used to improve recommendations, rank candidates, and personalize your experience. They are not sold to third parties.
Background Check Data. For gig workers who participate in the talent marketplace, we may facilitate background checks through a third-party provider (such as Checkr or Sterling). We receive the pass/fail status of the check. We do not receive or store the detailed contents of background check reports.
Device and Usage Data. We automatically collect information about your device and how you interact with the Platform, including IP address, browser type and version, operating system, device identifiers, pages visited, features used, timestamps, and referring URLs.
Communication Data. We collect the content of SMS messages sent and received through the Platform (shift offers, responses, notifications), as well as any emails or support messages you send to us.
2. How We Use Your Information
We use the information we collect to operate and improve the Platform, including to match employees and gig workers to shift coverage opportunities, compute and update behavioral signals (acceptance rate, reliability, fairness, trust scores), generate candidate rankings for shift coverage requests, calculate bonus suggestions based on historical fill-rate data, produce schedule drafts based on learned preferences and availability, send shift offers, schedule notifications, and operational alerts via SMS and email, facilitate background checks for marketplace participants, generate manager dashboards and weekly digest reports, detect anomalies and drift in behavioral patterns, maintain audit logs for compliance and accountability, respond to support requests and communicate with you about your account, and enforce our Terms of Service and protect against fraud or abuse.
3. How We Share Your Information
With Employers and Workers. When you participate in the talent marketplace, limited information is shared with the other party to facilitate shift coverage. Employers see a candidate's name, trust score, relevant skills, show-up rate, and distance. Workers see the employer name, shift details, and compensation. Detailed behavioral signal data (individual EWMA estimates, variance, confidence scores) is not shared with other users.
With Partner Businesses. If your employer participates in a partner network (org linking), your name, qualifications, and trust score may be visible to linked partner organizations when you are presented as a candidate for a shift at their location. This only applies to employees who have opted in to marketplace participation.
With Service Providers. We share information with third-party service providers who help us operate the Platform, including Twilio (SMS delivery), SendGrid (email delivery), Stripe (payment processing), background check providers (verification services), and hosting and infrastructure providers. These providers are bound by contractual obligations to use your data only for the purposes of providing services to us.
With Shift Saver Partners. If you use a Shift Saver feature (such as childcare or transportation assistance), limited information (your name, location, and shift timing) may be shared with the relevant service provider to facilitate the booking. This occurs only with your explicit action and consent.
For Legal Compliance. We may disclose your information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of VestaFide, our users, or the public.
Business Transfers. In the event of a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change via email or a prominent notice on the Platform.
We do not sell your personal information to third parties. We do not share your data with advertisers.
4. Behavioral Signals and the Learning Engine
The VestaFide learning engine computes behavioral signals from your Platform activity. These signals are stored as running statistical estimates — not as a ledger of individual events. Each signal type (such as acceptance rate or reliability) is stored as a single row per person, containing the current EWMA estimate, variance, sample count, and timestamp. The database does not grow with the number of events — it reflects your current behavioral profile.
These signals are used internally for candidate ranking, bonus pricing, fairness balancing, and schedule optimization. They are not used for purposes unrelated to the Platform (such as credit scoring, insurance underwriting, or employment decisions outside the Platform). You may request a summary of your behavioral signals at any time by contacting us at [email protected].
5. Data Retention
We retain your account information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes (such as audit logs required for compliance).
Behavioral signals associated with a deleted account are anonymized — they are disassociated from your identity and retained only as aggregate statistical data to improve Platform accuracy.
Audit log entries (which record system events such as offer sent, shift covered, schedule published) are retained for a minimum of seven years for compliance purposes.
6. Data Security
We implement administrative, technical, and physical safeguards to protect your personal information. These include encryption of data in transit (TLS 1.2+) and at rest, access controls limiting employee access to personal data on a need-to-know basis, secure credential storage using industry-standard hashing, regular security assessments, and audit logging of all access to sensitive data. For more information about our security practices, please see our Security page.
7. Your Rights and Choices
Access and Correction. You may access and update your account information at any time through the Platform. You may request a copy of the personal information we hold about you by contacting [email protected].
Deletion. You may request deletion of your account and personal information by contacting [email protected]. Deletion requests will be processed within 90 days, subject to legal retention requirements.
Communication Preferences. You may opt out of non-essential emails by using the unsubscribe link in any email. You may not opt out of transactional messages related to active shift offers, schedule changes, or account security, as these are necessary for Platform operation.
SMS. You may opt out of SMS communications by replying STOP to any message. Note that opting out of SMS will prevent you from receiving shift offers via text, which may limit your ability to participate in coverage events.
California Residents. If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact [email protected].
8. Children's Privacy
The Platform is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will delete it promptly.
9. Third-Party Links
The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing them with your information.
10. International Users
The Platform is operated from the United States. If you access the Platform from outside the United States, your information will be transferred to and processed in the United States. By using the Platform, you consent to this transfer.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform with a new effective date and, where appropriate, by email. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
VestaFide, Inc.
A subsidiary of CrossroadsAutomation.ai
Email: [email protected]