Privacy Policy

ShiftDeck ("we", "us") is a workforce time-tracking and scheduling service operated by Ricky Reasner. This policy explains what data we collect, how we use it, and how to exercise your rights.

Data we collect

• Account data — name, email, hashed password, company name, role, time zone.
• Time-tracking data — clock-in/out timestamps, GPS coordinates (when geofencing is enabled), device identifiers, kiosk PIN entries.
• Billing data — handled by Stripe. We store only the Stripe customer/subscription IDs and plan tier. We never see or store full card numbers.
• Usage analytics — server logs (IP, user agent, request paths) kept for security review for up to 90 days.

How we use your data

• To provide the time-tracking, scheduling, and payroll-export functionality.
• To process billing through Stripe.
• To send transactional email (account, billing, security) through Resend.
• To detect and prevent abuse (rate limiting, anomaly detection).

Sharing

We share data only with the subprocessors that make the service work:

• Stripe — billing. Stripe Privacy
• Resend — transactional email. Resend Privacy
• Hostinger / Caddy — VPS hosting + TLS termination.

We do not sell or rent your data. We do not share it with advertisers.

Retention

Account data is retained for the lifetime of your subscription plus 30 days. After cancellation, you can request deletion at any time. Time-tracking records are kept for the duration required by your jurisdiction's payroll law (typically 3-7 years), then purged. Server logs are kept for up to 90 days.

Your rights

You can access, correct, export, or delete your account data by emailing privacy@shiftdeck.tech or through the in-app settings page. We respond within 30 days. EU/UK residents have additional rights under GDPR; California residents under CCPA.

Security

Passwords are hashed with bcrypt. All traffic is TLS-encrypted. Database backups are encrypted at rest. We follow least-privilege access controls and rotate credentials on personnel change.

Children

ShiftDeck is a B2B service intended for adults managing payrolled employees. We do not knowingly collect data from anyone under 16.

Changes

Material changes to this policy will be announced via email at least 30 days before they take effect.

Contact

Privacy inquiries: privacy@shiftdeck.tech