Privacy Policy
Effective date: 1 January 2024
Your privacy is important to us. It is Shift Amp's policy to respect your privacy and to comply with applicable law and regulation regarding any personal information we collect about you — across our website at https://www.shiftamp.com, our manager web application, our employee mobile application, and any other site or service we own and operate (together, the "Services").
Shift Amp is an employee scheduling and shift-management service operated by ShiftAmp LLC ("Shift Amp", "we", "us").
Personal information is any information that can be used to identify you. This includes information about you as a person, information about the devices you use, and information about how you use an online service.
Two kinds of people, and why it matters
Shift Amp is sold to businesses. Most of the information in the Services is placed there by an employer about the people who work for it, and the employer decides what is collected, who may see it, and how long it is kept.
- If you are a business customer — an owner, operations lead, or manager who signs up for Shift Amp and administers an organization — we handle your information as described in this policy.
- If you are an employee using Shift Amp because your employer uses it, your employer directs what happens to your information in its account. We handle that information on your employer's behalf and in line with our agreement with them. Your employer's own privacy notice governs its employment records; questions about the information your employer manages are best directed to your employer first.
We will always help where we can, and we route requests appropriately rather than turning anyone away — see "Your rights and choices" below.
Information we collect
We collect information you or your employer knowingly and actively provide, and information sent automatically by your devices when you use the Services.
Account information
Names, work email addresses, and authentication credentials (passwords are stored only as a hash by our authentication provider). If you are invited to an organization, the invitation is issued by your employer.
Workforce information
Information your employer maintains about people who work for it, which may include preferred name, work phone number, hire date, job positions, work locations, employment status, and — where the employer chooses to configure them — compensation rates and the employer's own payroll reference for a person.
We deliberately do not collect date of birth, home address, emergency contacts, government or national-insurance identifiers, medical or demographic information, background checks, or performance and disciplinary records. A field belongs in Shift Amp only if a scheduling, timekeeping, or access decision depends on it.
Scheduling and workplace activity
Shifts and published schedules, availability, time-off requests and balances, shift release, claim, and swap activity, notes and reasons written by employees and managers, announcements, attendance records a manager enters, messages and images sent through the product's messaging and knowledge-base features, and an audit history of schedule-affecting actions (who did what, and when) so that schedules stay trustworthy and disputes are answerable.
Timekeeping information
Where an employer uses the time clock: clock-in and clock-out records, breaks, timecards, and correction requests. Shared workplace time-clock devices are secured with a device credential rather than a personal login.
Location information
Where an employer turns on location verification for a workplace, the mobile app may capture a single position at the moment you clock in or clock out to compare against the workplace location, and only with the permission you grant your device.
We do not track your location continuously, in the background, or between punches. Declining the permission does not prevent you from clocking in or out — the punch is simply recorded for the manager's review. Where a workplace is verified by network instead, we record only which of the employer's configured rules matched, and we do not retain the employee's IP address as part of that check. Precise location captured this way is available to the organization's administrators for reviewing time disputes, is not shown to coworkers or included in exports, and is not retained indefinitely.
Profile photos
A profile photo, if you add one or your employer adds one for you. Photos are stored privately, are visible to the people in your organization, are never used for face recognition, face matching, or any other biometric analysis, and can be removed.
Device and log data
When you visit our website or use our applications, our servers and service providers may automatically log standard technical data such as IP address, browser or device type and version, operating system, device identifiers and settings, pages or screens viewed, and the time and duration of your visit. If you enable push notifications, we store the notification token your device issues so we can deliver them.
If an error occurs, we may collect technical details about the error and the circumstances around it. Diagnostic reports are automatically stripped of credentials, tokens, contact details, and free-text notes before they reach us. While this information may not identify you on its own, it may be possible to combine it with other data to identify individuals.
Billing information
For organizations that pay for Shift Amp, we keep the billing contact details the account owner provides, the organization's subscription status, and the number of billable members a bill is calculated from. Card and bank details are collected and held by our payment processor. They never pass through Shift Amp and we do not see or store them. We do not send employee names, schedules, or other workforce information to our payment processor.
Marketing and website information
If you contact us, request a demo, subscribe to updates, or interact with us on social media, we collect what you provide — typically name, email address, business name, and the content of your message — together with website analytics information as described under "Cookies and similar technologies".
How we use information
We may collect, hold, use, and disclose information for the following purposes, and we do not further process personal information in ways incompatible with them:
- to provide, operate, and support the Services and their core features;
- to create and administer accounts and organizations, and to enforce the roles and permissions an employer configures;
- to send operational notifications — schedule changes, coverage requests, reminders, and similar — by push, email, or in-app message;
- to personalize your experience of the Services;
- to communicate with you, including responding to support requests;
- for analytics, research, and product development, to understand how the Services are used and to improve them;
- for marketing our own products and services to businesses and prospective business customers, and to measure the effectiveness of that marketing;
- for billing, internal record keeping, and administrative purposes;
- for security, fraud prevention, and to ensure the Services are used in line with our terms;
- to comply with legal obligations and to establish, exercise, or defend legal claims.
We do not use workforce or scheduling information for advertising, and we do not sell it. We do not record your screen or sessions, and our product analytics measure activity at the organization level rather than tracking identified individuals.
Cookies and similar technologies
Within the Shift Amp applications, cookies are functional: they keep you signed in and remember which organization you are viewing. There is no advertising or cross-site tracking inside the product.
On our marketing website, we and our providers use cookies, pixels, and similar technologies for analytics and advertising — to understand how visitors find and use the site, and to measure and deliver marketing for Shift Amp. Some of these are set by third parties, and certain US state privacy laws treat that activity as a "sale" or "sharing" of personal information for targeted advertising.
You can limit this through the cookie controls offered on our website where available, through your browser's settings, through a browser-level opt-out signal such as Global Privacy Control, or by contacting us at privacy@shiftamp.com. Limiting cookies may affect how parts of the website work.
How information is shared
We may disclose personal information to:
- Your employer, if you use Shift Amp as an employee. Your schedule and workplace activity are visible to the managers and administrators of your organization according to the roles it configures. Coworkers see only what a workflow requires.
- Service providers who help us run the Services, for the purpose of providing those services to us — hosting, database and authentication, file storage, email and push notification delivery, payment processing, mapping, error monitoring, analytics and advertising measurement, and customer support tooling.
- Our employees, contractors, and related entities, and any parent, subsidiary, or affiliate of our company.
- Professional advisors such as lawyers, accountants, and auditors.
- Courts, regulators, and law enforcement, where required by law or in connection with actual or prospective legal proceedings, or to establish, exercise, or defend our legal rights.
- A successor, in connection with a merger, acquisition, financing, or sale of assets, subject to this policy continuing to apply to the information transferred.
We may also combine or aggregate information in a form that does not identify anyone and use or disclose it freely.
The Services are operated in the United States, and information we collect is stored and processed there and in other countries where our service providers operate. Where you use the Services from outside the United States, you understand that your information will be transferred to and handled in the United States.
Security of your personal information
When we collect and process personal information, and while we retain it, we protect it within commercially acceptable means to prevent loss and theft as well as unauthorized access, disclosure, copying, use, or modification. Access is role-based and enforced in our database, so each organization's data is isolated from every other organization's.
Although we will do our best to protect the information you provide, no method of electronic transmission or storage is completely secure and no one can guarantee absolute data security. We will comply with the laws applicable to us in respect of any data breach.
You are responsible for choosing a strong password, keeping your credentials confidential, and maintaining the security of your own devices.
How long we keep your personal information
We keep personal information only for as long as we need it for the purposes described in this policy. Schedules, timekeeping records, and audit history are an organization's business records, and we keep them for as long as the organization uses Shift Amp — an individual leaving a workplace does not erase the record that a shift was worked. Where information is no longer required, we delete it or remove the details that identify a person. Certain categories, such as precise location captured at a punch and delivery records for notifications, are removed or de-identified on a routine schedule.
We may retain information longer where necessary to comply with a legal, accounting, or reporting obligation, or to establish, exercise, or defend legal claims.
Your rights and choices
You always retain the right to withhold personal information from us, with the understanding that your experience of the Services may be affected. We will not discriminate against you for exercising your rights.
Depending on where you live, you may have the right to request access to the personal information we hold about you, to have it corrected or deleted, and to opt out of certain uses. To make a request, contact us at privacy@shiftamp.com or support@shiftamp.com. We verify requests before acting on them, and we may need specific information from you to confirm your identity. Where the request concerns information an employer maintains in its own account, we will direct it to that employer or act on the employer's instructions.
Employees can request deletion of a personal account by emailing support@shiftamp.com from the email address on the account. Organization owners can request deletion of an organization. Some records may be retained where they are the organization's business records or where the law requires it; personal details are removed or anonymized.
If you have agreed to receive marketing from us, you can change your mind at any time using the unsubscribe link in any marketing email or by contacting us. Operational messages about your schedule are part of the Services; notification preferences for those are managed in the app.
If you believe any information we hold about you is inaccurate, out of date, incomplete, or misleading, contact us and we will take reasonable steps to correct it. If you believe we have breached a data protection law, contact us with full details and we will investigate and respond in writing. You may also contact a regulatory authority.
Children's privacy
The Services are business tools intended for use by employers and the people who work for them. We do not direct the Services to children, and we do not knowingly collect personal information from children under 13. Where an employer invites a person under the age of majority to its account, the employer is responsible for having the appropriate authority and consent to do so.
Limits of our policy
Our website and applications may link to external sites and services we do not operate. We have no control over their content or practices and cannot accept responsibility or liability for them. After following a link away from our Services, you should read the privacy policy posted there. This policy does not apply to your activities after you leave.
Changes to this policy
At our discretion, we may change this privacy policy to reflect updates to our business, current practices, or legal and regulatory changes. If we change it, we will post the updated policy at this address and update the effective date above. If the changes are significant, or where the law requires it, we will contact registered users with the new details, and we will obtain your permission or offer you a choice about any new use of your personal information where that is required.
Contact us
For any questions or concerns about your privacy, or to make a privacy request, contact us at:
General support: support@shiftamp.com