How Shiftly handles data
Last updated August 2026. This is a working draft while Shiftly is in evaluation; it will be reviewed by counsel before general availability.
What we collect
An account holds a name, work email, and role. Attendance features add clock-in and clock-out timestamps and, only where an organization enables device or location verification, coarse device signals and a coarsened location reading, not a precise GPS trace. Nothing is collected that a feature does not need.
Why we collect it
Attendance data exists to answer one question honestly: who worked, when, and where, for the organization that employs them. Verification signals exist to confirm a punch came from the right person, not to track someone outside of a shift.
Who can see it
Access is scoped by role, enforced on the backend for every client (mobile, web, and voice): an employee sees their own record, a manager sees their department, and a super admin sees the organization. Shiftly staff do not browse customer data outside of a support request the customer opened.
How long we keep it
Attendance and audit records are retained for the period each organization configures, defaulting to the length required for standard employment record-keeping. An organization can shorten or extend that window in its settings.
Corrections and deletion
Attendance is append-only: a correction adds a new, approved entry rather than editing history, so the record always shows what was originally recorded and what was later fixed. A person who leaves an organization can have their account deactivated; the historical record they created stays intact for the organization's own compliance needs.
Third parties
Shiftly does not sell personal data. Sub-processors are limited to what operating the service requires: hosting, database storage, and, where an organization enables it, transcription for the voice assistant. Each is bound to use data only to provide that service.
Contact
Questions about this policy or a request concerning your own data can be sent to privacy@shiftly.app.