Privacy Policy
Draft effective date: September 19, 2026
Information we collect
ShiftApex may store account details, department membership, credentials and expiration dates, schedules, availability, PTO requests, shift transactions, messages, tasks, notification settings, and technical records needed to operate and secure the service.
How information is used
Information is used to authenticate users, coordinate staffing, apply scheduling rules, deliver notifications, support workplace communication, maintain audit history, troubleshoot problems, and improve service reliability.
Who can access information
Authorized members of the user’s organization may access information according to their assigned role and department. Service providers may process limited information when needed to host, secure, communicate, or maintain ShiftApex. Information is not sold.
Retention and security
Records are retained according to the organization’s operational, contractual, and legal requirements. Reasonable administrative and technical safeguards are used, but no system can guarantee absolute security.
Choices and requests
Users may update certain account and notification settings in ShiftApex. Requests to access, correct, or remove information should be directed to the user’s organization administrator, subject to record-retention obligations.
Policy changes and contact
The organization may revise this policy as ShiftApex changes. The final policy should identify the organization responsible for the data and provide its privacy contact information.