Privacy Policy

Lavora (Lavora, “we,” “us”) operates a two-sided marketplace app that connects hospitality workers with venues offering on-demand shifts. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and your choices.

1. Information we collect

Account information — when you sign up we collect your email address and, based on your chosen role, either (a) your display name, city, skills, hourly minimum, and available travel radius (workers), or (b) your business name, business type, address, city, and state (venues).

Shift and application data — the shifts venues post, the applications workers submit, and any notes exchanged during the application flow.

Ratings — after a completed shift both parties may leave a star rating and optional comment about the other.

Messages — once a worker is confirmed for a shift, you and the other party can exchange messages in the app. We store message content and timestamps so the conversation persists and so we can investigate reports of abuse. Treat in-app messages as visible to Lavora; they are not end-to-end encrypted.

Payment information — payments are processed by Stripe. Venues enter card details and workers enter payout and identity details directly with Stripe; we never receive or store full card numbers or bank account numbers. We store only Stripe’s identifiers for your customer or payout account, the shift amount, our service fee, and the payment status.

Session and log data — we log request timestamps, IP address, user-agent string, and error information to operate, secure, and improve the service. These logs are retained for up to 30 days.

Cookies — we set first-party cookies to keep you signed in (session cookies from our auth provider Supabase) and to remember the email you entered on the sign-up screen. We do not use third-party advertising or tracking cookies.

2. How we use your information

• To provide the marketplace: matching workers with shifts, notifying venues of applications, and enabling accept/reject actions.
• To communicate with you about your account, shifts, and applications.
• To display worker profiles and venue profiles within the app.
• To detect, prevent, and address abuse or violations of our Terms of Service.
• To comply with legal obligations.

3. How we share your information

With the other side of the marketplace. Worker profiles (display name, city, skills, experience, ratings) are visible to authenticated venues browsing talent. Venue profiles (business name, city, ratings) are visible to authenticated workers viewing shift details.

With service providers. We use Supabase (Postgres, Auth, hosting), Vercel (deployment, edge routing), and Stripe (payment processing and payouts) to operate the service. Each processes data on our behalf under its own privacy terms. Stripe acts as an independent controller of the payment and identity information you provide to it directly — see stripe.com/privacy.

For legal reasons. We may disclose information when required by law, subpoena, or to protect our rights, our users, or the public.

We do not sell personal information.

4. Your choices

• Access and update your profile at any time from the Profile tab.
• Delete your account at any time from the Profile tab (Account → Delete account), or by emailing support@lavorastaffing.com. In-app deletion removes your profile, shift history, messages and ratings immediately; anonymized payment records may be retained by our payment processor for legal and tax purposes.
• Opt out of non-essential emails using the unsubscribe link in any message we send.

5. Data retention and security

We retain your account data for as long as your account is active. After account deletion, we remove personally-identifying information within 30 days but may retain anonymized transaction records for legal, tax, and abuse-prevention purposes.

We use industry-standard security controls including Row Level Security on our database, TLS in transit, and encrypted secrets in our deployment environment. No system is perfectly secure — if you have a security concern, contact security@lavorastaffing.com.

6. Children

Lavora is not directed at children under 16 and we do not knowingly collect information from them. If you believe a minor has provided us with information, please contact support@lavorastaffing.com and we will delete it.

7. Changes to this policy

We may update this policy from time to time. Material changes will be posted in-app with at least seven days’ notice before taking effect.

8. Contact

Questions? Email support@lavorastaffing.com or write to Address available on request via the support email above.

Preview build note: Lavora is in prototype testing. The information above is a starting draft and has not been reviewed by legal counsel. Have a lawyer review before public launch.