Privacy Policy

1. Introduction

This Privacy Policy explains how ShiftsGo collects, uses, stores, and protects data when you access or use the platform.

2. Information We Collect

3. How We Use Data

• Provide, operate, and improve the service
• Support scheduling, attendance, reporting, and day-to-day security operations workflows
• Verify clock-ins, checkpoint scans, patrol completion, incident context, and other proof-of-service records
• Communicate with customers about accounts, support, and service updates
• Detect, prevent, and investigate security incidents, fraud, misuse, and service abuse
• Comply with legal obligations and enforce our agreements

4. ShiftsGo Staff Mobile App

ShiftsGo Staff is used by field staff to receive assignments, clock in and out, complete patrol checkpoints, submit reports, and provide operational evidence.

• While a staff member is clocked in, ShiftsGo Staff may collect precise location in the foreground and background to maintain the proof-of-patrol record required by the employer or customer
• Location tracking pauses during an approved break and stops when the staff member clocks out or is no longer assigned to active tracking
• The app may use camera, photo library, document picker, NFC, QR scanning, and notifications when a workflow requires those device capabilities
• Location, evidence, and operational records may be visible to authorized supervisors, administrators, dispatchers, customers, or other workspace users based on role and permission settings
• We do not use ShiftsGo Staff location data for advertising and we do not sell location data

5. Local Device Storage and Offline Sync

ShiftsGo Staff may store limited data locally on the device so core field workflows continue during poor connectivity or while background tracking is running.

• Local data may include session state, shift context, queued checkpoint completions, queued incident reports, evidence files awaiting upload, notification registration records, and acknowledgement of required disclosures
• Evidence files may be copied to app-private storage until they are submitted, removed by the user, cleaned up by the app, or no longer needed for the queued workflow
• Queued operational records are synced to ShiftsGo when connectivity is restored or when the relevant workflow resumes

6. AI Assistance

Where enabled by a customer plan or feature setting, ShiftsGo may use AI-assisted tools to support scheduling, recommendations, report drafting, log-entry polishing, summarization, or operational review.

• Operational text such as notes, log entries, incident descriptions, and related context may be processed by ShiftsGo or authorized service providers to provide the requested AI-assisted feature
• AI-assisted output may be reviewed, confirmed, edited, rejected, or audited depending on the workflow
• Original operational records may be preserved for accuracy, audit, and compliance purposes

7. Data Storage and Processing

• Data may be stored in regional infrastructure selected for performance, resilience, or compliance needs
• We use secure cloud infrastructure and managed service providers to operate the platform
• Authorized subprocessors may process data on our behalf subject to contractual and security controls

8. Data Sharing

We do not sell personal data. We may share data with:

• Authorized users within your company workspace
• Authorized customer, client, or site users when your company configures access to operational reports, incidents, checkpoints, or proof-of-service records
• Service providers that support hosting, storage, analytics, communications, and support operations
• Legal, regulatory, or law-enforcement authorities when required by law or necessary to protect rights and safety
• A successor entity in connection with a merger, acquisition, or similar transaction, subject to appropriate safeguards

9. Customer and User Responsibilities

• Customers are responsible for providing any required workplace notice, consent, policy, or legal basis for employee or contractor monitoring, location tracking, evidence collection, and operational reporting
• Users should only upload photos, images, notes, and attachments that are relevant to authorized work duties and should avoid unnecessary personal or sensitive information
• Customers and users must comply with local employment, privacy, data-protection, labor, and evidence-handling laws that apply to their operations

10. Data Retention

• We retain data only as long as necessary for service delivery, security, troubleshooting, billing, and legal compliance
• Some operational and evidence retention settings may be configurable by customers
• When data is no longer required, we delete or anonymize it subject to backup, audit, and legal retention requirements

11. Security Measures

• Encryption in transit and at rest where applicable
• Access controls, authentication, and role-based permissions
• Monitoring, logging, and audit trails for security-relevant actions

12. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your data
• Request correction or deletion at shiftsgo.com/data-deletion or by emailing [email protected]
• Withdraw consent where consent is the legal basis

13. International Compliance

We aim to operate the platform in a manner consistent with applicable legal frameworks, including:

• GDPR (EU)
• PIPEDA (Canada)
• Indian IT Act and related rules

14. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the service after an update becomes effective constitutes acceptance of the revised policy.

15. Contact

For privacy-related questions, contact: