ShiftX Privacy Policy
ShiftX processes user data to deliver product functionality, maintain service quality, and support security. This policy outlines the application's approach to privacy.
Last updated:
1. Data controller
The entity that develops and operates the ShiftX application is EtoDev. Contact: eto_dev@hotmail.com
2. Categories of data processed
ShiftX may process data in the following categories to operate its product modules:
- Account and identity information (name, surname, email, username)
- Organisational and role relationships (department, job title, reporting line)
- Scheduling and attendance data (shifts, working hours, attendance/absence records)
- Leave and request records (leave type, date range, approval status)
- Training progress information (completed modules, assessment results)
- Payslip access logs (when an e-payslip is viewed; payroll content remains on the employer's system)
- Technical data related to application usage (session duration, error reports)
3. Purposes of processing
Data is used for the following purposes:
- Providing user access and authentication
- Running scheduling, attendance, and operational workflows
- Managing leave requests and approval flows
- Sending notifications and delivering employee portal services
- Improving application security and product performance
4. Security measures
Technical and administrative controls — including access control, role-based authorisation, encrypted communications (HTTPS/TLS), and audit logging — are applied to protect data processed within ShiftX. Additional controls may be enabled based on the organisation's configuration.
5. Data retention and access
Data is retained for the period necessary to operate the relevant service and to meet the organisation's operational needs. Role-based access limits are enforced to prevent unauthorised access. When the retention period expires, data is securely deleted or anonymised.
6. Third-party sharing
ShiftX does not share or sell user data for advertising purposes. Data may be shared only with infrastructure providers strictly necessary to deliver the service, and with competent authorities when required by law.
7. Your rights
You have the right to access, correct, delete, and object to the processing of your personal data. To exercise these rights, please contact us at eto_dev@hotmail.com.
8. Contact
For questions about this privacy policy or how your data is processed, please reach us at eto_dev@hotmail.com.