How ShiftSphere collects, uses, and protects your personal and employee data.
1. Information We Collect
We collect information you provide directly: name, email, phone number, company name, and employment details entered into the platform. We also collect usage data (pages visited, features used, device info) to improve our service. For attendance features, we may process location data and biometric identifiers only with explicit consent and as configured by your organization's administrator.
2. How We Use Your Information
We use collected data to: (1) provide and maintain the ShiftSphere platform, (2) process payroll and attendance records as directed by your employer, (3) send transactional notifications, (4) improve product features based on usage patterns, (5) ensure platform security and prevent fraud. We never sell personal data to third parties.
3. Data Storage & Security
All data is encrypted at rest (AES-256) and in transit (TLS 1.3). We use isolated database schemas per tenant — your organization's data is never co-mingled with other customers. Data is stored in SOC 2 compliant data centers. We conduct regular penetration testing and maintain comprehensive audit logs.
4. Data Retention
We retain your data for as long as your organization maintains an active account. Upon account termination, we delete all tenant data within 30 days, with a 14-day grace period for data export. Payroll records may be retained longer where required by tax or labor law.
5. Your Rights
You have the right to: access your personal data, request correction of inaccurate data, request deletion (subject to legal retention requirements), export your data in machine-readable format, and withdraw consent for optional processing. Contact privacy@shiftsphere.co to exercise these rights.
6. Cookies
We use essential cookies for authentication and session management. Analytics cookies (optional) help us understand usage patterns. You can manage cookie preferences at any time. See our Cookie Policy for details.
7. Third-Party Services
We use select third-party services: Stripe (payments), AWS (hosting), Sentry (error monitoring). Each processor is bound by data processing agreements. We do not share employee data with advertising networks or data brokers.
8. Changes to This Policy
We may update this policy periodically. Material changes will be communicated via email to account administrators at least 30 days before taking effect. Continued use after changes constitutes acceptance.
9. Contact
For privacy inquiries: privacy@shiftsphere.co. Data Protection Officer: support@shiftsphere.co. Address: Punjab, India.