← Back to home

Last updated: April 2026

Privacy Policy

This Privacy Policy explains how ShiftWorker ("we," "us," or "our") collects, uses, and protects your information when you use our service at shiftworker.ai.

What We Collect

When you create an account, we collect:

  • Account information: Your name and email address (from Google or GitHub OAuth sign-in)
  • Preferences: Timezone, usage preferences, and settings you configure
  • Cloud provider tokens: OAuth tokens from your cloud provider (e.g., Azure, DigitalOcean) to manage VMs on your behalf. These are encrypted and stored only as long as needed.
  • Payment information: Processed by Stripe — we do not store your card details directly

What We Don't Collect

Your AI assistant runs on your own cloud infrastructure. We do not read, store, or have access to the content of your AI conversations. That data lives on your VM and is entirely under your control.

How We Use Your Information

  • To provide and maintain the ShiftWorker service
  • To provision and manage VMs in your cloud account
  • To process payments and manage your subscription
  • To send you service-related communications (e.g., billing, downtime)
  • To improve and develop our service

Cookies

We use session cookies to keep you signed in. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

Third-Party Services

We use the following third-party services to operate ShiftWorker:

  • Stripe — payment processing
  • Supabase — database and authentication
  • Vercel — web application hosting
  • Azure / DigitalOcean — cloud providers where your AI assistants are deployed (on your account)

Each of these services has their own privacy policy. We recommend reviewing them if you have concerns.

Data Retention

We retain your account data for as long as your account is active. When you delete your account, we delete your data from our systems. Cloud provider tokens are revoked and deleted when no longer needed or upon account deletion.

Note: Deleting your ShiftWorker account does not automatically delete VMs or data in your cloud provider account. You are responsible for managing your own cloud resources.

Your Rights (CCPA / GDPR)

Regardless of where you live, you have the right to:

  • Request a copy of your personal data
  • Request deletion of your personal data
  • Request correction of inaccurate data
  • Opt out of any marketing communications

To exercise any of these rights, email us at hello@shiftworker.ai. We will respond within 30 days.

Data Security

We use industry-standard security measures to protect your data, including encryption of sensitive information like cloud provider tokens. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of significant changes via email or through the service.

Contact

Questions about this Privacy Policy? Email us at hello@shiftworker.ai.