This Privacy Policy explains how ShiftRI collects, uses, and protects information when you use our workforce rostering service. We're committed to handling your data — and your employees' data — responsibly.
| Category | Examples |
|---|---|
| Account information | Name, email, business/company name, password (stored as a secure hash, never in plain text) |
| Business data you enter | Employee names, roles, shifts, pay rates, availability, and related rostering information |
| Payment information | Handled directly by Stripe — we do not store full card numbers on our servers |
| Usage data | Login timestamps, basic technical logs for security and troubleshooting |
We do not sell your data or your employees' data to third parties.
| Service | Purpose |
|---|---|
| Stripe | Payment processing for subscriptions |
| EmailJS | Sending account notification emails |
These providers process limited data strictly to perform their function (e.g. Stripe processes payment details to charge your subscription) and are bound by their own privacy and security obligations.
Your data is stored in a secured database. Passwords are hashed and never stored in readable form. We take reasonable technical measures to protect your information, though no system can be guaranteed 100% secure.
If your subscription is paused or cancelled, your data is retained (not deleted) so that reactivating your subscription restores full access to your roster and business information as it was.
Authorised ShiftRI staff may, where necessary, access your account to provide customer support or troubleshoot an issue — for example, if you contact us for help and we need to see what you're seeing to resolve it. This access does not require your password and is restricted to specifically authorised accounts only.
All support access is logged internally, including who accessed the account and when. We do not access accounts to view, use, or share your data for any purpose other than providing support or maintaining the Service.
If you're a business owner using ShiftRI, you may enter information about your employees (names, shifts, pay rates). You are responsible for having the appropriate basis to store this information about your staff, consistent with your obligations under the Privacy Act 1988 (Cth) and any applicable workplace laws. We act as a data processor for this information on your behalf.
You can access, correct, or request deletion of your account information at any time by contacting us. Note that deleting an account also removes the roster and employee data associated with it — we recommend exporting anything you need first.
ShiftRI uses browser local storage to keep you logged in and to cache your roster data for faster loading. This is not used for advertising or third-party tracking.
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above.
Questions about this policy or your data can be sent via the Contact Us page in the app, or to our support email.