Privacy Policy

• Your name, the programs you're documenting hours for, and your state.
• Your phone number, so you can sign in. We store it as a one-way cryptographic hash plus the last four digits — we don't keep the full number readable in the database.
• Case numbers, if you choose to add one. These are encrypted in our database, and the only place they can be read in the product is your own signed-in session. Nonprofits and agencies never see them.
• The volunteer shifts a nonprofit confirms for you, or that you log yourself.
• If you're a coordinator or payer staff member, your work email.

• Coordinators at a nonprofit only see the hours you log or that they confirm for you.
• A payer (an agency, E&T provider, or MCO) only sees your hours after you share, or consent to share, your records with them. You can revoke that consent at any time from Settings.
• Anyone with your letter's QR code or link can see a verification card: your confirmed month, total hours, and the confirming organizations' names. It does not show your phone number, case number, or anything else about you.
• Upspire Studio staff access data only to operate, secure, and support the service.

• Every table in our database enforces row-level security, so your hours, case numbers, and records are readable only by you and by the nonprofits and agencies you've shared them with.
• Confirmed records are cryptographically signed; a correction never overwrites a record, it supersedes it.
• Case numbers and signing keys are encrypted at rest and only decrypted for the session that's allowed to see them.
• Every write to a confirmation, self-logged shift, attestation record, or consent is logged in an audit trail.

We keep your account and confirmed records as long as your account is active. Confirmed hours and the letters made from them are kept even after that, so a letter someone already accepted keeps verifying. If you delete your profile, your personal data is withdrawn; records already shared with a payer you consented to remain verifiable, but the verification page will show that you withdrew.

• Share or revoke a payer's access to your records any time from Settings.
• Delete your profile from Settings. We'll ask you to confirm first.
• Choose English or Spanish anywhere in the product.

Verified Hours does not use advertising or tracking cookies, and we don't run third-party analytics. We use only what's required to keep you signed in.

We may update this policy as the product changes. We'll update the date at the top of this page when we do.

Questions about your data or this policy: hello@verifiedhours.org. See also our Terms of Use and how verification works.