Privacy Policy

1. Introduction

Welcome to Shiftelio (“we”, “our”, or “us”). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our workforce management platform at www.shiftelio.com(the “Service”).

2. Information We Collect

We collect the following categories of information:

• Account Information: Name, email address, phone number, and password when you register.
• Business Information: Company name, address, GST number, and employee details entered into the platform.
• Location Data: GPS coordinates collected for employee attendance verification. On the Android app, location is collected continuously in the background during an active work shift, including when the app is closed or not in use, using a foreground service. This data is visible to the employing business and is used solely for shift-attendance purposes. Location tracking stops automatically when the shift ends or the employee clocks out.
• Photo Data: A selfie photo captured at each clock-in and clock-out event for identity verification. Photos are uploaded to Shiftelio's cloud storage and are accessible to the employing business.
• Usage Data: Information about how you access and use our Service, including IP address, browser type, and pages visited.
• Payment Information: Billing details processed securely via our payment provider (Razorpay). We do not store full card numbers on our servers.

3. How We Use Your Information

• To provide, operate, and maintain our Service.
• To process employee attendance and generate payroll reports.
• To verify employee identity at clock-in and clock-out via selfie photos.
• To send WhatsApp and push notifications related to scheduling and alerts.
• To process payments and send billing-related communications.
• To improve and personalize your experience.
• To communicate with you about updates, security alerts, and support.

4. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share data with trusted service providers who assist us in operating our platform (e.g., Supabase for database hosting, Razorpay for payments, Twilio for messaging), all bound by confidentiality agreements.

Employer Access:Employee location data, attendance records, selfie photos, and profile information are accessible to the business (employer) that manages the employee's account on Shiftelio. This access is limited to the employing business and is enforced via row-level security policies.

4a. Background Location Collection

The Shiftelio Android app collects precise location data in the background to enable attendance tracking during active work shifts. This collection occurs even when the app is closed or not in use. A persistent notification is displayed on the device whenever background location tracking is active. Location collection is tied exclusively to active shift sessions and stops immediately upon clock-out or shift end. This data is not used for advertising or analytics.

4b. Camera & Photo Data

The Shiftelio Android app captures a selfie photo when an employee clocks in or clocks out to verify their identity. Photos are uploaded securely to Shiftelio's cloud storage and are accessible to the employing business. Photos are retained for the duration of the employee's account. This data is not used for advertising, biometric analysis, or facial recognition, and is not shared with any third party beyond the employing business.

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS), row-level security in our database, and regular security audits. However, no method of transmission over the internet is 100% secure.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. You may request deletion of your data at any time by emailing support@shiftelio.com.

Location Data:Real-time location records are retained for up to 90 days after the shift in which they were collected. Attendance check-in/check-out coordinates are retained as part of the attendance record for the duration of the employee's account.

7. Cookies

We use cookies and similar tracking technologies to improve your experience, analyze usage, and maintain sessions. You can control cookie settings through your browser preferences.

8. Your Rights & Data Deletion

Depending on your jurisdiction, you may have the right to: access, correct, or delete your personal data; object to or restrict processing; and data portability. To exercise these rights, contact us at support@shiftelio.com.

Data Deletion Request: You may request full deletion of your account and associated data at any time by emailing support@shiftelio.comwith the subject line "Data Deletion Request". We will process your request within 30 days. Note that your employer (business account) may retain attendance records as required by applicable labour laws.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our Service.