Privacy, data export and account deletion

Privacy notice (draft — requires owner/legal review)

ShiftProof is a personal shift-reconciliation service and, for agency workspaces, a processor for the agency. Personal records stay in your personal workspace; joining an agency never gives that agency access to unrelated employers, personal notes, or all of your payslips. Sharing a report is an explicit, time-limited, revocable act.

We do not sell payroll data, run advertising SDKs, or use uploaded records to train models. Document extraction runs through the configured provider only; human review is always required before a financial record is relied on.

Retention is set per data category in the production policy (see docs/PRIVACY_DATA_MAP.md). This draft does not claim UK-only data hosting or any certification.

Your data

Account deletion is distinct from leaving an agency. Public deletion requests (without signing in) go through the deletion page and still require identity verification.