Keeping your data safe is our priority
You trust us with your team's schedules, hours and contact details, and we know what that means. Here is how we look after them.
Security
How we protect and back up your data.
Is Shifta safe?
Yes. Your data is hosted in the European Union, encrypted and backed up daily. It is also kept apart from other businesses' data, and we never sell it.
Is my data encrypted?
Yes, at every step. Everything between your device and Shifta travels over an encrypted connection (TLS 1.2 or 1.3), and what is stored is encrypted too (AES-256). Your password is never kept in plain text. Payments go through Stripe, so we never see your card number.
Can my data be lost if a server fails?
Your data does not depend on a single server. It is backed up daily as encrypted copies with several providers, one of them in Switzerland. If one became unavailable, another would take over. Our infrastructure is also under continuous monitoring.
Your data
Where it is, who can see it and what we do with it.
Where is my data stored?
In the European Union, on Amazon Web Services (AWS) infrastructure, the most widely used cloud host in the world. Major Swiss companies such as Swisscom, Zurich Insurance and Richemont trust it with their data too. We also keep backups in several European countries, including Switzerland with Infomaniak.
For some technical services, such as sending e-mails or notifications, we use providers outside Europe, always with the safeguards the law requires. You will find all of them in our Privacy Policy.
Who can see my team's data?
Only people in your business, each according to their role: owner, admin, manager or employee. This separation is enforced by the database itself, so an account from another business can never read your data.
Does Shifta sell my data?
No, never. Your data belongs to you. We do not sell it and we do not use it for advertising.
How long do you keep my data?
For as long as your account exists. You can export or delete it whenever you like. After a deletion we keep only what Swiss law requires: working hours for 5 years, without a name, and accounting records for 10 years.
Privacy and GDPR
Your rights, and what we measure to improve Shifta.
Is Shifta GDPR compliant?
Yes. Shifta follows the Swiss Federal Act on Data Protection (FADP) and the EU GDPR. Our Data Processing Agreement is part of the Terms, and you can view, correct, export or delete your data at any time.
What usage data do you analyse?
Only if you accept it in the cookie banner. We then look at how the website and web app are used, which pages are opened and where people stop, to improve Shifta. This never includes your name, your e-mail, what you type or your team's data. The iPhone and Android apps measure nothing at all.
Another question?
Write to us and someone from the team will get back to you personally.