The short version: your data is yours. We don't sell it. We don't use it to train AI. You can delete everything and leave anytime.
When you create an account: your name, email address, and business name. When employees join: their name and email. When you use the scheduling features: shift data, clock-in/out times, swap requests, and team messages. When you visit the site: standard server logs (IP address, browser, pages visited). We do not collect payment card data — that is handled directly by our payment processor.
To provide the service: powering schedules, timesheets, notifications, and messaging. To communicate with you: product updates, billing notices, and support responses. To improve the product: aggregate, anonymized usage patterns (never individual employee data). We do not use your data to train AI models or sell it to advertisers.
We share data only with essential service providers: our cloud infrastructure (Supabase), email delivery (Resend), and payment processing. These providers are bound by data processing agreements. We do not sell, trade, or rent your data to any third party. If we are acquired, your data stays subject to this policy or you will be notified with 30 days to export.
Employees added to your account are sub-processors under your control. You are responsible for informing your employees that their scheduling and time data is processed through ShiftPro. Employees may request access to their own records by contacting the business owner or emailing us directly.
Your data is retained while your account is active. If you cancel, your data is kept for 30 days in case you return, then permanently deleted. You can request immediate deletion at any time by emailing hello@shiftpro.ai. Payroll export records are retained for 7 years as required by law.
All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Our database uses Row-Level Security so your data is isolated from other accounts at the query level. We conduct regular security reviews and promptly address vulnerabilities. If a breach affects your data, we will notify you within 72 hours.
We use only essential cookies: one session cookie to keep you logged in, and one preference cookie for your display settings. We do not use advertising cookies, tracking pixels, or third-party analytics that share data externally. You can disable cookies in your browser but login functionality will be affected.
You have the right to access, correct, or delete any personal data we hold. You can export all your data from the account settings page. To exercise any of these rights or ask a question, email hello@shiftpro.ai — we respond within 2 business days.
We'll email account owners at least 14 days before any material changes take effect. The updated date at the top of this page will reflect any revision. Continued use after changes means acceptance.
Privacy questions? Email hello@shiftpro.ai. ShiftPro AI, Inc., Oregon.