Your data in SynchroShift

• Your account: email address, name, profile picture (if you upload one), sign-in method (email and password, or Google), and for guest workspaces the time the guest trial ends.
• Team members: name, work email, position, colour, status, location, department, job title, contract and contracted weekly hours, and whether under-18 working-time rules apply. A workspace can also store an hourly rate, phone number and notes; only the person themselves and people given the "view sensitive employee data" permission can read those.
• Schedules: shifts (date, times, role, breaks, paid minutes, published or draft), confirmed worked hours, saved schedule versions, closed days, shift templates, break rules and staffing requirements.
• Requests and availability: time-off and sick-leave requests, standing availability, shift offers and swaps, and their approval status.
• Messages and tasks: announcements, tasks, task and shift comments, and in-app notifications.
• Booking connections: if a manager connects a booking system, the booking times, titles and the staff member each booking belongs to.
• Usage records: a log of when each person used an AI feature (who, which workspace, when), used to enforce fair-use limits; and a log of sent emails (recipient, type, status).
• In your browser: your sign-in session, and small preferences such as the CSV format you picked. SynchroShift does not use advertising or analytics cookies.

• Supabase (database, sign-in and file storage). The SynchroShift database is hosted in the EU, in the eu-west-1 region (Ireland).
• Cloudflare hosts the app (Cloudflare Workers) and provides the Turnstile human check on the sign-in and sign-up pages. Cloudflare keeps request logs for operating the service.
• Google Gemini powers the AI assistant and AI explanations. When you use them, your question and the context needed to answer it are sent to Google: the page you are on, your role, the workspace name, and a summary of this week's schedule that you are allowed to see (names, positions, contracted hours and shift times). Pay rates, phone numbers, notes and email addresses are never included. Chat history is kept only in your open browser tab, not in the SynchroShift database.
• Google, only for people who sign in with a Google account.
• Resend sends account emails (sign-up confirmation, password reset, invitations) from notify@synchroshift.app.
• Formspree receives messages sent through the contact form (name, email, message).
• Booking systems you connect yourself: SynchroShift fetches bookings from the address a manager enters, or receives them from that system.

Access is decided per workspace and per permission. Staff see their own shifts once a schedule is published; managers with scheduling permissions also see drafts and the whole team. Calendar feed links (for example for SEDERAN) contain only published shifts with names, roles and times, and stop working when a manager revokes them.

Managers can remove team members, shifts and other workspace data in the app. To delete your own account, a whole workspace, or to get a copy of your data, email s.golee@icloud.com from the address you use with SynchroShift. Guest workspaces are meant to be temporary.

Questions about privacy: s.golee@icloud.com.