Privacy Policy

Effective Date: July 31, 2025

At Shyft AI LLC ("we", "us", or "our"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our services or communicate with us.

1. Important Information and Who We Are

1.1 Purpose of this Policy

This policy explains how Shyft AI LLC collects and processes your data when you use our website, platform, or services.

1.2 Data Controller

For customers registered with Shyft AI LLC, we act as the data controller for your personal data related to using our services, and as data processor for information you provide us through the platform (e.g., emails, calendar, recordings).

1.3 Contact details

Shyft AI LLC
8 The Green, STE A
Dover, DE 19901
United States
Email: support@shyft.ai

For privacy questions or requests, please contact us at the above.

2. What Personal Data We Collect

We collect several types of personal information:

  • Contact Data: Name, business role, email, and phone number
  • Financial Data: Billing and payment details
  • Correspondence Data: Emails, communications, notes
  • Usage Data: Interaction with our website and services
  • Technical Data: IP address, device info, browser type, location, and other device details
  • Service Data: Email content, calendar events, audio recordings and transcripts relating to your use of the platform

3. How We Collect Your Data

  • Direct Interactions: Information you provide during registration, communication, or use of the platform
  • Automated Means: Cookies and similar technologies to collect technical data during web usage
  • Third-Party Sources: Analytics providers and other partners, consistent with privacy laws

4. How We Use Your Personal Data

We use personal data to:

  • Provide and manage the platform and services
  • Improve and develop our offerings based on usage data
  • Comply with legal obligations
  • Carry out legitimate business interests consistent with your rights

5. Use of AI and Third-Party Models

We use third-party AI providers to enable features like email classification, drafting, and meeting transcription.

  • Data shared includes email headers, body, calendar event details, and audio transcripts
  • We ONLY share data required to provide these services, with your explicit consent
  • These providers do NOT use your data to train or improve their own AI models
  • Audio recordings are processed only after you have secured consent from all participants

6. Who We Share Data With

  • Technology partners including Railway (hosting), Supabase (database), N8N (automation), Bolt.new (UI), React (frontend), Axiom (logging), and GitHub (code management)
  • Analytics and services providers for operational purposes
  • Legal and regulatory authorities as required

All partners are contractually bound to handle data securely and only per instructions.

7. International Data Transfers

Your data may be transferred and processed in countries outside your residence including the US. We implement appropriate safeguards (e.g., EU-US Data Privacy Framework) to protect data during such transfers.

8. Data Security

We use:

  • Encryption in transit and at rest
  • Access controls and multi-factor authentication
  • Segregated environments for development and production
  • Regular security updates and audits
  • Secure login using OAuth2 via your email provider

9. Data Retention

We retain your personal data only as long as necessary to perform our services or comply with legal requirements. Upon account closure, your data is deleted promptly unless law requires otherwise.

10. Your Rights

You have rights including:

  • Access to your data
  • Correction of inaccuracies
  • Deletion of data
  • Restriction of or objection to processing
  • Data portability

Requests can be made by contacting us at support@shyft.ai.