Privacy Policy

ShiftScheduleUp ("we", "us", "our") operates the website at shiftscheduleup.com and the free shift-schedule tools available on it. For the purposes of the EU General Data Protection Regulation (GDPR), ShiftScheduleUp is the data controller for the personal data described in this policy.

You can reach us at any time at info@shiftscheduleup.com.

• The schedule tool works without an account. What you build stays in your browser unless you choose to save it to an account.
• Creating an account is optional and only asks for an email address and a password.
• We do not sell your personal data for money. The Free experience is supported by Google AdSense, which may process device and usage data for advertising as described below.
• Monthly Pro, Yearly Pro and Lifetime Pro members use the website without ads while their Pro access is active.
• You can export or permanently delete your account and its data at any time from your dashboard.
• Wherever you live, you have privacy rights: GDPR in the EU and EEA, CCPA and similar laws in the US, all described below.

Information you enter into the tool

The shift patterns, dates, notes, events, colours and preferences you set in the generator are stored in your own browser (using local storage) and can be encoded into a shareable link. This information is not sent to our servers unless you sign in and choose to save a schedule to your account.

Account information

If you create an account, we collect your email address, a securely hashed password, your display or first name if you provide one, your email verification status, and the date you registered.

Content you save

When you are signed in, the schedules, saved versions, team roster entries, notifications and preferences (such as language, time zone and country) that you choose to save are stored on our servers so you can access them across devices.

Payment information

If you buy Monthly Pro, Yearly Pro or Lifetime Pro, payment is processed by our payment providers (Stripe and PayPal). We do not receive or store your full card number. We keep a record of your orders, such as the plan, amount, currency and date, as a financial and tax record.

Messages you send us

If you use the contact form or email us, we receive the message and the email address you send it from so we can reply and provide support.

Information collected automatically

Like most websites, our servers and providers record basic technical data such as your IP address, browser type, device and pages viewed. Our analytics and advertising providers may also use cookies, local storage, advertising identifiers and similar technologies, subject to your privacy choices. These technologies are described in our Cookie Policy.

We use the information above to:

• provide the schedule tools, calculators and exports;
• create and manage your account and saved content;
• process Pro purchases, Monthly and Yearly renewals, cancellations and refunds;
• send you essential service emails (verification, security alerts, receipts) and, if you opt in, optional summaries and product updates;
• keep the service secure and prevent fraud and abuse;
• understand how the site is used so we can improve it;
• show and measure advertising on the Free experience, subject to your consent and privacy choices;
• comply with our legal obligations.

Where the GDPR applies, we rely on the following legal bases:

• Performance of a contract: to provide the tools, run your account and deliver Pro features you have paid for.
• Legitimate interests: to secure the service, prevent abuse, and improve our product, in a way that does not override your rights.
• Consent: for non-essential analytics, advertising cookies, personalised advertising where applicable, and optional marketing or summary emails. You can withdraw consent at any time.
• Legal obligation: to keep records such as order and tax information for as long as the law requires.

We use essential cookies to keep you signed in, remember your language, and honour Free or ad-free access. With your consent where required, analytics and advertising providers may also use cookies and similar technologies. For details and controls, please see our Cookie Policy.

We do not sell your personal data. We share it only with the service providers who help us run the site, and only as needed for them to perform their service:

• Hosting: our website host stores the site and its database.
• Payments: Stripe and PayPal process Pro purchases.
• Analytics: Google Analytics and Microsoft Clarity help us measure usage.
• Advertising: Google AdSense serves and measures clearly labelled ads for guests and Free members. Google may act as an independent controller for some advertising processing.
• Email delivery: our mail provider delivers transactional and opt-in emails.
• Content delivery: a content delivery network serves some shared code libraries used by the tool.

We may also disclose information if required by law, to protect our rights or users, or in connection with a merger, acquisition or sale of assets, in which case we will continue to protect your data under this policy.

Some of our providers process data outside the EEA, including in the United States. Where that happens, the transfer is protected by an appropriate safeguard such as the European Commission's Standard Contractual Clauses or an adequacy decision, so your data receives an equivalent level of protection.

We keep account information for as long as your account is active. If you delete your account, we remove your personal data and saved content promptly, except for records we are legally required to keep, such as order and tax records, which we retain for the period required by law. Data you keep only in your browser stays until you clear it. Server logs are kept for a limited period for security and troubleshooting.

We serve the site over encrypted HTTPS, store passwords using strong one-way hashing, and limit who can access personal data. No method of transmission or storage is completely secure, so while we work hard to protect your information, we cannot guarantee absolute security.

If you are in the EU or EEA, you have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent where we rely on it. Similar rights apply to users in the United Kingdom and many other regions.

You can exercise the main rights yourself, without contacting us:

• Access and portability: download everything we hold about you as a JSON file from your account settings.
• Erasure: permanently delete your account and its data from the same settings page.

You can also email us at info@shiftscheduleup.com to make any request. You have the right to lodge a complaint with your local data protection supervisory authority.

If you are a resident of the United States, you have choices about your personal information under laws such as the California Consumer Privacy Act (CCPA, as amended by the CPRA) and comparable state laws in Virginia, Colorado, Connecticut, Utah, Texas and elsewhere.

We do not sell your personal information for money. Google AdSense may use or disclose device and usage information for personalised advertising or cross-context behavioural advertising where permitted and where you have consented. Some state laws may define this activity as "sharing" or "targeted advertising".

Depending on your state, you may have the right to:

• know what personal information we collect and how we use it;
• access a copy of your personal information;
• correct inaccurate personal information;
• delete your personal information;
• opt out of sale, sharing, or targeted advertising;
• not receive discriminatory treatment for exercising your rights.

You can use the privacy choices message shown on the site to opt out of applicable advertising uses. You can access, export or delete your account data from your account settings, or email us at info@shiftscheduleup.com. We will not deny you service, charge a different price, or give you a lower quality of service for exercising these rights. Under California's Shine the Light law, we do not share personal information with third parties for their own direct marketing.

ShiftScheduleUp is intended for adults in the workforce and is not directed to children. We do not knowingly collect personal data from children under 16, or under 13 for users in the United States (the age set by the US Children's Online Privacy Protection Act, COPPA). If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will change the "last updated" date at the top of this page, and for significant changes we will provide a more prominent notice. Your continued use of the site after an update means you accept the revised policy.

If you have any questions about this document or how we handle your information, we are happy to help.

• Email: info@shiftscheduleup.com
• Contact form: https://shiftscheduleup.com/contact/

We aim to respond to every message within a few business days.