1. Company & Scope

Upspire Studio, LLC (“Upspire Studio,” “we,” “us,” or “our”) is located in Bellingham, Washington and provides multiple branded web applications, including Volunteer Shift Manager, under unified terms. These Terms of Use apply to all services unless an individual application has supplemental terms.

2. Eligibility

You must be at least 13 years old to use our services. By using Volunteer Shift Manager, you represent that you meet this age requirement and that all information you provide is accurate and current.

3. Acceptable Use

You agree not to:

• Use any automated means (bots, scrapers, crawlers) to access or collect data from our services.
• Use the services for any unlawful purpose or in violation of any applicable laws or regulations.
• Attempt to gain unauthorized access to any part of the services or any system or network connected to them.
• Transmit any content that is harmful, offensive, or infringes on the rights of others.

4. Content Ownership

You retain ownership of any content you submit to our services. By submitting content, you grant Upspire Studio a non-exclusive, worldwide, royalty-free, sublicensable license to use, reproduce, and process that content solely for the purpose of delivering and improving our services.

5. Disclaimers

Our services are provided “as is” without warranties of any kind. We do not guarantee uninterrupted or error-free service. Any AI-generated content within our services may be inaccurate, incomplete, or outdated, and you are responsible for verifying such content before relying on it.

6. Limitation of Liability

To the fullest extent permitted by law, Upspire Studio's liability is limited to the greater of (a) the total fees you paid in the 12 months preceding the claim or (b) $100. We are not liable for indirect, incidental, consequential, or punitive damages.

7. Dispute Resolution

Any disputes arising from these terms or your use of our services shall be resolved through binding individual arbitration in Whatcom County, Washington. Class action proceedings are not permitted. Washington state law governs these terms.

8. Changes to These Terms

We may update these Terms of Use from time to time. Continued use of our services after changes are posted constitutes your acceptance of the updated terms. The effective date at the top of this page reflects the most recent revision.

1. Information We Collect

We collect the following types of information:

• Account information: Email address and organization details when you sign up as a coordinator.
• Volunteer information: Name, email address, and phone number submitted by volunteers when signing up for shifts.
• Usage data: How you interact with the service, including pages visited and features used.
• Device & technical data: Browser type, IP address, and cookies used to operate and improve the service.

2. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the service.
• Send shift confirmations, reminders, and coordinator messages to volunteers.
• Process payments and manage subscriptions.
• Improve and develop new features.
• Respond to support requests.

3. Third-Party Processors

We share data with trusted third-party service providers as necessary to operate the service. These include:

• Vercel – hosting and infrastructure
• Supabase – database and authentication
• Stripe – payment processing
• Resend – transactional email delivery
• Twilio – SMS notifications
• Google – website analytics and ad measurement (only with cookie consent)

For the full list — including each provider's purpose, region, and Data Processing Agreement — see our subprocessors page.

We do not sell your personal information to third parties.

4. Volunteer Data (Controller vs. Processor)

For coordinator account data (name, email, billing information, settings) we act as a data controller.

For volunteer data (the people who sign up for shifts through a nonprofit's public link) we act as a data processor on behalf of the nonprofit, which is the controller. The nonprofit is responsible for obtaining the appropriate legal basis to process volunteer data, including any consent that may be required by local law. We process this data only on the nonprofit's documented instructions and as needed to deliver the service (sending shift reminders, recording signups, etc.).

If you are a volunteer and want to exercise data rights about information held about you, the most direct path is to contact the nonprofit you signed up with. You can also use the “Download my data” and “Delete my data” buttons on your personal “My shifts” page, or contact us at the address in section 9 and we will route the request to the nonprofit.

4a. Legal Basis for Processing (EU / UK / EEA)

For users in the EU, UK, or EEA, the legal bases on which we rely are:

• Contract (GDPR Art. 6(1)(b)) — processing coordinator account information necessary to provide the service you signed up for.
• Legitimate interests (Art. 6(1)(f)) — keeping the service secure, preventing abuse, and improving features. We balance these interests against your rights, and you may object at any time.
• Consent (Art. 6(1)(a)) — optional analytics cookies, marketing emails, and SMS reminders. Consent can be withdrawn at any time using the unsubscribe link in any email, by replying STOP to any SMS, or by changing your choice in the cookie banner.
• Legal obligation (Art. 6(1)(c)) — retaining limited records to meet tax, accounting, and anti-fraud requirements.

4b. International Data Transfers

Volunteer Shift Manager is operated from the United States and all our sub-processors host data in the United States. If you access the service from the EU, UK, or EEA, your data is transferred to the United States. We rely on the European Commission's Standard Contractual Clauses (SCCs), included by reference in each sub-processor's data processing agreement, to provide a lawful basis for these transfers. A list of sub-processors and links to their DPAs is available at /legal/subprocessors.

5. Data Retention

• Account data is retained for 90 days after account deletion.
• Usage logs are retained for 12 months.
• Financial records are retained for 7 years as required by tax law.

6. Your Rights

Depending on where you live, you have the following rights over your personal data:

• Access — get a copy of the data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — have your data deleted (subject to legal retention requirements).
• Restriction — limit how we process your data while a request is being resolved.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interests, including direct marketing.
• Withdraw consent — at any time, where consent is the legal basis.
• Lodge a complaint — EU/UK/EEA residents may complain to their local data protection supervisory authority.

Self-serve tools:

• Coordinators can delete their account and all related data from Settings → Delete account.
• Volunteers can download or delete their data from the “My shifts” link in any confirmation email.
• Reply STOP to any SMS to opt out of all text messages.
• Click Unsubscribe in any email footer to opt out of all email.

For anything else, contact us at the address in section 9. We respond to verifiable requests within 30 days.

7. Security

We use TLS encryption for data in transit and database-level access controls for data at rest. While we take reasonable precautions, no system is perfectly secure. Please contact us immediately if you believe your account has been compromised.

8. Cookies and Analytics

We use a small number of essential cookies required to keep you signed in, remember your preferences, and protect the service against abuse. These are always active and cannot be disabled.

We also use optional analytics and advertising cookies (Google Analytics, Google Ads) to understand how the site is used and measure ad performance. Visitors in the EU, EEA, UK, and Switzerland see a consent banner before these cookies are loaded — analytics and ads only run after you accept. Visitors elsewhere can disable cookies in their browser settings; some features may not work correctly if all cookies are blocked.

You can change your cookie choice at any time by clearing the vsm_cookie_consent_v1 entry in your browser's local storage and reloading the page.

8a. Age Limits

The service is intended for users aged 13 and older. For users in the EU/EEA, the minimum age may be higher (between 13 and 16, depending on the member state); coordinators are responsible for ensuring that volunteers signing up through their public links meet the applicable age threshold in their jurisdiction.

9. Contact

For privacy-related requests or questions, contact us at hello@upspire.studio.

10. Changes to This Policy

We may update this Privacy Policy periodically. The effective date at the top of this page reflects the most recent revision. Continued use of the service after changes are posted constitutes your acceptance.