ShiftUp Privacy Policy

1. Introduction

ShiftUp ("we", "our", "us") is a workforce management platform designed for organizations to manage scheduling, time tracking, communication, and operational processes.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you access our mobile applications, website, or services.

We are committed to complying with all applicable data protection laws including GDPR, KVKK, and international privacy standards.

2. Data We Collect

2.1 Personal Information Provided by the User:

• Name, surname
• Email address, phone number
• Employee ID or internal identifiers
• Authentication information
• Communication preferences

2.2 Automatically Collected Data:

• Device information (model, OS version, device ID)
• App usage data (pages visited, features used)
• Log data and error diagnostics
• IP address and browser information

2.3 Workplace-Related Data:

• Shift schedules
• Attendance records
• Leave/vacation information
• Branch/location assignments
• Internal system permissions

2.4 Location Data (Optional / If Enabled):

We may collect approximate or precise location only if your employer has enabled location-based attendance or task validation, and only with your explicit consent.

3. How We Use Your Data

• Provide and operate the ShiftUp platform
• Create and manage employee schedules
• Record attendance and shift logs
• Support communication between employees and administrators
• Improve overall system performance
• Provide customer support and troubleshoot issues
• Ensure security and fraud prevention
• Comply with legal obligations

We never use your data for advertising purposes.

4. Legal Basis for Processing (GDPR)

• Contractual necessity: to provide the ShiftUp service
• Legitimate interest: system optimization and security
• Consent: optional features like location access, notifications
• Legal obligation: storing logs and reports as required by law

5. Data Sharing

We may share personal data only with:

5.1 Your Employer / Organization:

Your employer determines what data is processed within the platform.

5.2 Service Providers:

Trusted third-party vendors supporting SMS, email, hosting, cloud services, monitoring, and analytics.

All third parties sign strict Data Processing Agreements (DPA) ensuring GDPR compliance.

5.3 Legal Authorities:

Only when required by applicable law.

We never sell or rent your personal information.

6. Data Storage & Security

We use industry-standard security practices including:

• Encryption in transit (TLS 1.2/1.3)
• Encryption at rest (AES-256)
• Access control and audit logs
• Multi-zone server redundancy
• Periodic penetration tests
• Role-based permissions (RBAC)

7. Your Rights (GDPR & KVKK)

You have the right to:

• Access your personal data
• Request correction or deletion
• Object to processing
• Withdraw consent at any time
• Request data portability
• File a complaint with a supervisory authority

Requests can be made via support@shiftup.global.

8. Data Retention

We retain data only for as long as necessary for providing services, legal retention periods, security, and auditing. Once retention periods expire, data is securely deleted or anonymized.

9. Children’s Privacy

ShiftUp is intended for organizational use only and not directed toward individuals under the age required by local employment law. We do not knowingly collect data from children without employer authorization.

10. Cookies & Tracking

Our website uses essential cookies for login functionality, analytics, and improving service performance. We do not use advertising cookies.

11. Third-Party Links

Our website or apps may contain links to third-party pages. We are not responsible for their privacy practices.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our services or legal requirements. Updates will be posted on this page with a revised Last Updated date.

13. Contact Us