Privacy Policy
Last updated: May 4, 2026
1. Who we are
Shifto is a rota planning tool operated by Electric Gap (“we”, “us”, “our”).
If you have any questions about this policy or your data, you can contact us at:
2. What data we collect
We collect the information you provide when using Shifto, including:
Account information
- Email address
- Login/authentication details
Business and team data
- Employee names
- Roles and skills
- Availability and time off
- Shift assignments and rota data
Usage data
- How you use the product, so we can improve the service
3. How we use your data
We use your data to:
- provide the rota planning service
- generate and manage rotas
- improve the performance and usability of Shifto
- support and respond to user requests
We do not sell your data and we do not use your data for advertising.
4. Legal basis
Where applicable, including under UK and EU data protection law, we process your data under the following legal bases:
- Contract — to provide the service you signed up for
- Legitimate interests — to improve and operate the product
- Legal obligations — where required by law
5. How your data is stored
Your data is securely stored using trusted third-party providers, including:
- Supabase — database and authentication
- Render / Cloudflare — hosting and infrastructure
These providers process data on our behalf and are required to keep it secure.
6. Data sharing
We do not sell or share your data with third parties for marketing.
We only share data with service providers necessary to run Shifto, such as hosting, database, authentication, and infrastructure providers.
7. Data retention
We keep your data for as long as your account is active.
If you delete your account or request deletion, we will remove your data within a reasonable timeframe, unless we are required to retain it for legal reasons.
8. Your rights
If you are in the UK or EU, you may have the right to:
- access your data
- correct inaccurate data
- request deletion of your data
- object to or restrict processing
To exercise these rights, contact us at:
9. Security
We take reasonable technical and organisational measures to protect your data.
However, no system is completely secure, and we cannot guarantee absolute security.
10. International data transfers
Your data may be processed in countries outside your own, including where our service providers operate.
We ensure appropriate safeguards are in place where required.
11. Changes to this policy
We may update this Privacy Policy from time to time.
If we make significant changes, we will notify you through the app or by email.
12. Contact
If you have any questions or concerns about this policy, please contact: