ShiftsGo Legal

Privacy Policy

This policy explains what ShiftsGo collects, why we collect it, and how we protect it while delivering security operations software.

At a Glance

  • We collect account, operational, device, and optional evidence data needed to run the service.
  • We do not sell customer data.
  • Operational and evidence records are retained only as long as needed for service delivery, security, and compliance.

Contents

1. Introduction
2. Information We Collect
3. How We Use Data
4. Data Storage and Processing
5. Data Sharing
6. User Responsibilities
7. Data Retention
8. Security Measures
9. Your Rights
10. International Compliance
11. Changes to This Policy
12. Contact

1. Introduction

This Privacy Policy explains how ShiftsGo collects, uses, stores, and protects data when you access or use the platform.

2. Information We Collect

Account and Contact Information

  • Name, email address, phone number
  • Company and workspace details

Operational Data

  • Shift schedules and assignments
  • Attendance records and time stamps
  • Incident reports, checkpoint activity, notes, and related operational logs

Device and Usage Data

  • IP address
  • Browser and device information
  • Usage analytics and session activity

Optional Evidence and Media Data

  • Uploaded photos, attachments, and related metadata
  • Time, location, and audit details attached to field evidence when those features are enabled

3. How We Use Data

  • Provide, operate, and improve the service
  • Support scheduling, attendance, reporting, and day-to-day security operations workflows
  • Communicate with customers about accounts, support, and service updates
  • Detect, prevent, and investigate security incidents, fraud, misuse, and service abuse
  • Comply with legal obligations and enforce our agreements

4. Data Storage and Processing

  • Data may be stored in regional infrastructure selected for performance, resilience, or compliance needs
  • We use secure cloud infrastructure and managed service providers to operate the platform
  • Authorized subprocessors may process data on our behalf subject to contractual and security controls

5. Data Sharing

We do not sell personal data. We may share data with:

  • Authorized users within your company workspace
  • Service providers that support hosting, storage, analytics, communications, and support operations
  • Legal, regulatory, or law-enforcement authorities when required by law or necessary to protect rights and safety
  • A successor entity in connection with a merger, acquisition, or similar transaction, subject to appropriate safeguards

6. User Responsibilities

  • Ensure that you have an appropriate legal basis, notice, and consent for data you collect or upload through the platform
  • Comply with local employment, privacy, data-protection, and evidence-handling laws that apply to your operations

7. Data Retention

  • We retain data only as long as necessary for service delivery, security, troubleshooting, billing, and legal compliance
  • Some operational and evidence retention settings may be configurable by customers
  • When data is no longer required, we delete or anonymize it subject to backup, audit, and legal retention requirements

8. Security Measures

  • Encryption in transit and at rest where applicable
  • Access controls, authentication, and role-based permissions
  • Monitoring, logging, and audit trails for security-relevant actions

9. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your data
  • Request correction or deletion
  • Withdraw consent where consent is the legal basis

10. International Compliance

We aim to operate the platform in a manner consistent with applicable legal frameworks, including:

  • GDPR (EU)
  • PIPEDA (Canada)
  • Indian IT Act and related rules

11. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the service after an update becomes effective constitutes acceptance of the revised policy.