Privacy Policy

Effective: October 2, 2026 ShiftFence LLC, a Virginia limited liability company, 510 King St, 5th Floor, Office 531, Alexandria, VA 22314, USA ("ShiftFence", "we") provides a time clock service to businesses ("Customers"). This policy explains what we collect, why, and your choices. 1. Our role For worker and company data, the Customer (your employer) is the controller and decides how it is used; ShiftFence processes it on the Customer's behalf. For website visitors, demo requests and Customer billing, ShiftFence is the controller. 2. What we collect - Account data: name, email, phone, employee ID, role. - Time data: clock-in/out times, breaks, shifts, availability, time-off requests and corrections. If service is unavailable, employees can submit missed-punch times when it returns; managers review them, and original requests and decisions are retained. - Location: your phone requests a fresh GPS position when you clock in, clock out, start or end a break. If your employer enables optional on-shift check-ins, you sign its location policy and agree in the app, checks are attempted at the configured interval while you are clocked in and the app is open and visible. Locked phones, closed apps and background browsers may pause checks. We do not continuously track you or check your location when you are off the clock. A recorded off-site check-in can alert you and your manager; a past reading is not proof of your current location. - Device data: device type, browser, IP address, and security/audit logs. - Sales data: details you submit when booking a demo or signing an agreement. - Billing data (Customer administrators): billing contact name, email, billing address and subscription status (plan, period, amounts). Full payment card numbers are collected and stored by Paddle.com, our Merchant of Record, not by ShiftFence. 3. How we use it To run the time clock, enforce your employer's rules, prepare payroll reports, send notifications you've chosen, keep the service secure, prevent fraud, provide support, and meet legal obligations. We do not sell personal information and do not use it for targeted advertising. Legal basis (EU/UK visitors and users): where these rules apply, we process account, time and location data to perform our contract with the Customer and, for workers, at the direction of the employer as necessary to take steps prior to entering or perform the employment relationship; device and security data on the basis of our legitimate interests in keeping the service secure and preventing fraud; billing data to perform our contract with the Customer and comply with tax and accounting obligations; optional on-shift location check-ins only with the worker's consent (which can be withdrawn by leaving the employer's program); and marketing or demo communications only with consent. Workers can contact their employer or us to object to processing based on legitimate interests. 4. Sharing We share data only with: your employer and its authorized admins; Paddle.com, our Merchant of Record, which processes billing contact, payment details and tax information to sell subscriptions, take payment, handle tax compliance and issue invoices (Paddle handles this data under its own privacy notice, https://www.paddle.com/legal/privacy); service providers that host, email, map or deliver notifications for us under confidentiality obligations; authorities when required by law; or a successor in a merger or acquisition, with notice. 5. Retention Your employer sets how long records are kept. Time and audit records are commonly kept at least as long as wage-and-hour law requires (often 3+ years). Website and sales data are kept as long as needed for the relationship. Billing records are kept as long as tax and accounting law requires. After a subscription ends or a trial ends without a paid plan, the Customer has 30 days to export company records. After that window, company data may be deleted from active systems. Deletion is not guaranteed to finish on day 30: limited records may be retained where required by law, and backup copies may remain until the normal backup cycle expires. Customers remain responsible for exporting and retaining payroll records for their own legal obligations. 6. Security Data is encrypted in transit, isolated per company, and access is role-restricted. Company logos are stored privately and shared only via short-lived links. Owner access requires multi-factor authentication. No system is perfectly secure; we will notify affected Customers of a breach as the law requires. 7. Your rights Depending on where you live (for example California, Virginia, Colorado, Illinois or the EU/UK) you may have rights to access, correct, delete or export your data, or object to certain uses. Workers should contact their employer first; we will help the employer respond. You can also contact us below. We will not discriminate against you for exercising your rights. 8. Children ShiftFence is not directed to children under 16 and we do not knowingly collect their data. 9. International Data is processed in the United States. Where required, we use appropriate safeguards for transfers. 10. Changes Material changes are shown at next login and require acceptance. 11. Contact ShiftFence, 510 King St, 5th Floor, Office 531, Alexandria, VA 22314, USA · shiftfence.com/quote Payments and our Merchant of Record ShiftFence subscriptions are sold through Paddle.com, which acts as our Merchant of Record. When a Customer subscribes, Paddle collects and processes the billing contact, payment details, billing address and tax information needed to sell the product, manage the subscription, take payment, handle tax compliance and issue invoices. ShiftFence receives limited billing records from Paddle (such as subscription status, plan and billing period) but does not receive full card numbers. Paddle handles this data under its own privacy notice: https://www.paddle.com/legal/privacy.