This Privacy Policy explains how Heyshift (“Heyshift,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit heyshift.io, contact us, book a demo, or use our workforce scheduling SaaS products and related services (the “Services”).

Heyshift is built primarily for business customers in the United States. If you use the Services on behalf of your employer or another organization, that organization controls much of the information submitted to Heyshift. We process that information to provide and support the Services.

Personal information we collect

We may collect the following categories of information:

Contact and account information, such as name, work email, phone number, company name, role, billing contact, and login credentials.
Commercial and subscription information, such as plan, seat counts, order details, billing status, renewal information, demo requests, and sales communications.
Workforce scheduling information, such as locations, teams, roles, shifts, availability, leave records, approvals, schedule comments, and related configuration submitted by a customer or its users.
Usage and device information, such as IP address, browser type, device identifiers, pages visited, referring URLs, approximate location derived from IP, log events, and interactions with the Services.
Communications, such as messages you send through forms, email, support requests, demo notes, and feedback.
Cookie and similar technology information, as described in our Cookie Policy.

We do not intentionally collect sensitive personal information unless a customer chooses to submit it while using the Services. Customers are responsible for deciding what workforce data they enter into Heyshift and for providing required employee notices.

How we use personal information

We use personal information to:

Provide, operate, secure, and improve the Services.
Create accounts, authenticate users, manage seats, administer subscriptions, and process billing.
Respond to sales, demo, support, security, legal, and procurement requests.
Configure and deliver workforce scheduling workflows, including rosters, approvals, availability, and related notifications.
Monitor performance, prevent fraud, debug issues, enforce our Terms of Service, and protect the Services.
Send service messages and, where permitted, product updates or marketing communications. You may opt out of marketing emails, but we may still send transactional messages.
Comply with legal obligations and respond to lawful requests.

How we disclose information

We may disclose personal information to:

Service providers and processors that host, secure, analyze, support, or help operate the Services.
Payment, billing, and finance providers that help process subscriptions and invoices.
Customer administrators or authorized users in your organization, depending on account permissions.
Professional advisors, such as lawyers, accountants, auditors, insurers, and security consultants.
Authorities or third parties when required by law, subpoena, court order, or to protect rights, safety, and security.
Business transaction parties in connection with a merger, acquisition, financing, restructuring, or sale of assets.

We do not sell personal information for money. If we ever use advertising or analytics in a way that is considered a “sale” or “sharing” under California law, we will update our disclosures and provide required choices.

Customer data

For paid SaaS customers, the organization that subscribes to Heyshift generally controls workforce scheduling data submitted to the Services. We process that data according to the customer’s instructions, the applicable order, our Terms, and any data processing agreement signed with the customer.

If you are an employee or user of one of our customers and have questions about schedule records, employment information, or account access, please contact your employer first. We may need to route certain requests to the customer administrator.

Data retention

We keep personal information for as long as reasonably necessary to provide the Services, manage subscriptions, meet legal and accounting obligations, resolve disputes, enforce agreements, and maintain security. Retention periods vary by data type, customer settings, and contract requirements.

Security

We use administrative, technical, and organizational safeguards designed to protect personal information. No system is perfectly secure, so we cannot guarantee absolute security. Customers and users must protect account credentials and promptly report suspected unauthorized access.

Your choices

Depending on your location and relationship with Heyshift, you may request access, correction, deletion, or portability of certain personal information, or object to certain processing. We may verify your identity and may need to coordinate with the customer that controls the relevant account.

You can opt out of marketing emails by using the unsubscribe link or contacting us. Browser cookie controls are described in our Cookie Policy.

California residents

California residents should review our California Privacy Notice, which explains additional rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act.

Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. Customers are responsible for ensuring their use of the Services complies with applicable labor, employment, and privacy laws for their workforce.

International users

Heyshift is focused on the United States. If you access the Services from outside the United States, you understand that information may be processed in the United States and other locations where our providers operate.

Related notices

Please also review our Terms of Service, Cookie Policy, California Privacy Notice, and Refund Policy.

Updates

We may update this Privacy Policy from time to time. The “Last updated” date shows when this page was last revised.

Contact

Privacy questions or requests: hello@heyshift.io