This California Privacy Notice supplements our Privacy Policy and applies to California residents whose personal information is subject to the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, “CCPA”).

Who this applies to

This notice applies to California residents who visit heyshift.io, contact us, book a demo, receive sales or support communications, or use Heyshift through their employer or another organization.

For workforce scheduling data submitted by a Heyshift customer, the customer may be the business that controls the information, and Heyshift may act as a service provider or contractor. If your request concerns your employer’s Heyshift account, we may direct you to that employer.

Categories of personal information

In the past 12 months, we may have collected the following CCPA categories:

Identifiers, such as name, work email, phone number, IP address, account identifiers, and company information.
California customer records information, such as billing contact details and business contact information.
Commercial information, such as plan, seat counts, subscription, invoice, demo, and sales inquiry information.
Internet or electronic network activity, such as device information, browser type, pages visited, log events, and interactions with the Services.
Geolocation data, limited to approximate location inferred from IP address.
Professional or employment-related information, such as job title, employer, role, location assignment, schedule-related records, availability, leave, or approval activity submitted by a customer or user.
Inferences, such as business interest in specific Heyshift features or customer support needs.
Sensitive personal information, only if a customer chooses to submit it or if account security data qualifies under applicable law. We do not use sensitive personal information to infer characteristics.

Sources

We collect information from you, your employer or organization, customer administrators, your device or browser, service providers, and communications with us.

Purposes for collection and use

We use personal information to provide and secure the Services, manage accounts and seats, process subscriptions, respond to requests, deliver support, improve functionality, send permitted communications, comply with law, prevent fraud, and enforce our agreements.

Disclosures

We may disclose personal information to service providers, contractors, customer administrators, payment and billing providers, professional advisors, authorities when required by law, and parties involved in business transactions. We do not sell personal information for money.

We do not knowingly sell or share personal information of consumers under 16 years of age.

Sale or sharing

Heyshift does not currently sell personal information for money. If we use analytics or marketing technologies that are considered “sharing” for cross-context behavioral advertising under California law, we will provide a clear opt-out mechanism and update this notice.

Your California rights

Subject to exceptions under law, California residents may have the right to:

Know/access the categories and specific pieces of personal information we collect.
Delete personal information, subject to legal and contractual exceptions.
Correct inaccurate personal information.
Opt out of sale or sharing, if applicable.
Limit certain uses of sensitive personal information, if applicable.
Non-discrimination, meaning we will not discriminate against you for exercising CCPA rights.

How to submit requests

Email hello@heyshift.io with the subject “California privacy request.” Please describe the right you want to exercise and provide enough information for us to verify your identity and locate relevant records.

For requests involving a customer account, we may need to verify through the customer administrator or direct you to your employer because that organization controls the relevant workforce records.

Authorized agents

You may designate an authorized agent to submit a request on your behalf. We may require proof of authorization and may also ask you to verify your identity directly, unless prohibited by law.

Retention

We retain personal information for as long as reasonably necessary for the purposes described in our Privacy Policy, including providing the Services, managing subscriptions, complying with legal obligations, resolving disputes, and maintaining security.

Updates

We may update this notice when our practices, vendors, or legal obligations change. The “Last updated” date shows when this page was last revised.

Contact

California privacy questions: hello@heyshift.io