Privacy Policy

1. Information We Collect

We collect information you provide directly when creating an account and using ShiftRelay, including:

• Account information (name, email address, password)
• Organization details (company name, contact information)
• Shift handover data (equipment status, personnel records, production metrics, safety incidents)
• Usage data (login times, feature usage, device information)

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service
• Authenticate users and manage access control
• Send service-related communications (account verification, approval notifications)
• Ensure security and prevent abuse
• Generate anonymized analytics to improve the platform

3. Data Storage and Security

Your data is stored securely using industry-standard encryption. We use Supabase for database hosting with row-level security policies to ensure data isolation between organizations. All data transmission is encrypted via TLS/SSL.

4. Data Sharing

We do not sell your personal information. We may share data only in the following circumstances:

• With your organization's other authorized users (as part of the Service)
• With service providers who assist in operating the platform (hosting, email delivery)
• When required by law or to protect our legal rights
• With your explicit consent

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you or your organization administrator requests account deletion, we will remove your personal data within 30 days, except where retention is required by law.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent for optional data processing

7. Cookies

We use essential cookies for authentication and session management. These cookies are strictly necessary for the Service to function and cannot be disabled. We do not use advertising or tracking cookies.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through a notice on the Service. Your continued use after changes constitutes acceptance of the updated policy.

9. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at support@shiftrelay.io.