Privacy notice

What Hiro Connect collects

• To sign you in: your mobile number. Hiro Connect sends a code to it each time you sign in.
• Your profile: your name, a public handle, a photo, and an email address if you give one.
• If you work shifts: the roles you work, your experience, a short bio, your Instagram handle if you add it, the certificates you upload (such as Smart Serve or a food handler certificate) and Hiro Connect's review of them, the address you search from and how far you will travel, and when you are available.
• If you run a venue: the venue's name, legal name, business record and your authority to sign for it, its address, a contact name, phone and email, its logo, a cover photo and a short description of the place.
• If you enable device alerts: this browser's push endpoint and encryption keys, the sign-in they belong to, your opt-in and revocation, a private browser identifier and saved device alert choice, and dispatch records. Signing out pauses delivery while keeping your choice for this account and browser. Signing back in resumes only new alerts; missed updates remain in Notifications. Hiro Connect sends a generic heads-up and checks your current sign-in before showing it.
• What you do on HIRO: the shifts you post, apply to, are offered and work; whether a shift happened; the ratings you give and receive; your messages with a venue or worker after a booking; reports you make and people you block; and the notices Hiro Connect sends you and whether they arrived.

Hiro Connect does not use advertising or analytics trackers. It sets only the cookies it needs to keep you signed in and to remember your theme, your role, the venue you are working in and your device alert choice. The device alert cookie contains a random identifier, not your account or sign-in details; only a hash is saved with your account. Its lifetime is up to 400 days, renewed when you enable or resume alerts. Clearing browser data can remove the remembered choice. Turning alerts off keeps them off after sign-in. Hiro Connect also uses local browser storage for tutorial acknowledgement and to pause the alert setup reminder for this account and browser for seven days. These local reminder choices are not sent to Hiro Connect.

Why Hiro Connect uses it

• To match shifts with people who are qualified and nearby, and to show the pay up front.
• To check certificates and venue identity before people rely on them.
• To tell you about offers, bookings, changes and cancellations.
• To keep Hiro Connect safe: reports, blocks, suspending accounts that break the rules, and preventing fraud.
• To keep the records Ontario's job posting rules and Hiro Connect's own rules require.

Hiro Connect does not sell your information and does not use it for advertising.

Who sees it

• Anyone with your profile link sees your name, photo, bio, experience, the roles you work, the certificates Hiro Connect approved (by type, never the file), and your area as a neighbourhood name. Never your address, your exact location or your phone number.
• A venue you apply to sees your profile, your experience and your Instagram handle if you add one, before any offer is accepted. After acceptance it sees the conversation for that shift.
• Workers see a venue's name, address, logo, cover photo, description, pay and shift details, and after a booking, the conversation for that shift.
• People at Hiro Connect see what they need to review certificates, verify venues, decide reports and attendance disagreements, and answer requests like the ones below. Every decision is recorded.
• Services Hiro Connect uses, only for the work they do for Hiro Connect: Supabase stores Hiro Connect's database, sign-ins and files; Vercel runs the Hiro Connect website; Twilio sends sign-in codes, and text alerts if you turn them on; Resend sends email alerts if you turn them on; Geocodio turns the address you search from into a map point. Nobody else receives your address. Your browser's push service (Apple, Google, Mozilla or Microsoft, depending on the browser) receives encrypted device alerts and endpoint metadata if you turn them on. These services may process that information outside Canada.

Where it is kept

Hiro Connect's data is stored by Supabase in the United States (Oregon) today, and the website runs in the United States. Information kept outside Canada can be reached by the courts and authorities of that country under its laws.

How long Hiro Connect keeps it

• While your account is open, Hiro Connect keeps what you gave it and what you did.
• When your account is closed, you can no longer sign in and your public profile is hidden. Hiro Connect keeps the records other people rely on, such as who worked a confirmed shift, ratings, messages and reports, because their history refers to them.
• Shift postings and what happened to them are kept for at least three years.

Your choices and your rights

• See it: download a copy of your data at any time from Your data in your account.
• Ask for more: ask Hiro Connect for everything it holds about you, including records other people made about you. Hiro Connect answers within 30 days. Some details about other people, such as who reported you, may be left out to protect them.
• Correct it: change your profile, area, roles, certificates and alerts yourself. For anything you cannot change, ask Hiro Connect for a correction from Your data; Hiro Connect answers within 30 days.
• Stop alerts: turn device, email and text alerts off in your notification settings, or reply STOP to a text.
• Close your account: ask from your account. Hiro Connect closes it within 30 days, as described above.
• Complain: tell Hiro Connect first, from Your data. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Changes to this notice

When this notice changes in a way that matters, Hiro Connect shows it to you again and asks you to accept it before you carry on. The version date is at the top of the page.