Privacy Policy

Effective Date: April 28, 2026  |  Last Updated: April 28, 2026

Shiftwork Solutions LLC ("Shiftwork Solutions," "we," "us," or "our") operates the website at shift-work.com (the "Site"). This Privacy Policy explains what information we collect, how we use it, who we may share it with, and what choices you have. By using the Site, you agree to the practices described here.

1. Information We Collect

Information You Provide Directly

We collect information you voluntarily submit through the Site, including:

• Contact form: Name, company name, phone number, email address, and any message content you include.
• Newsletter signup: Email address.
• Shiftwork Operations Assessment: Name (optional), company name (optional), email address, and your responses to assessment questions. Assessment responses are used to generate your diagnostic report and are stored to improve our normative benchmarks.
• Thomas AI Advisor: Any text you type or speak into the Thomas chat interface. These inputs are processed in real time to generate responses and may be logged for quality assurance and system improvement purposes.

Information Collected Automatically

When you visit the Site, certain information is collected automatically through cookies and similar tracking technologies:

• Google Analytics: We use Google Analytics to understand how visitors find and use our Site. This service collects data such as pages visited, time on site, general geographic location (city/region level), device type, browser, and referring URL. Google Analytics uses cookies to track this information. The data is aggregated and does not personally identify you to us. For more information, see Google's Privacy Policy. You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.
• Server logs: Our hosting infrastructure (Render) automatically records IP addresses, browser type, pages requested, timestamps, and similar technical data for security and operational purposes.
• Security systems: Our contact and form submission systems log IP addresses and user agent strings to detect and prevent spam and abuse.

2. How We Use Your Information

We use the information we collect to:

• Respond to inquiries, consultation requests, and messages you send us
• Deliver assessment reports and diagnostic results you request
• Send our newsletter to subscribers who have opted in
• Operate and improve the Thomas AI Advisor
• Analyze Site usage to improve content and user experience
• Detect and prevent fraudulent or abusive activity
• Comply with legal obligations

We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.

3. Third-Party Services We Use

We work with the following third-party service providers who may process information on our behalf:

• Google Analytics (Google LLC) — Website analytics. Data is processed under Google's terms and privacy policy.
• Formspree — Fallback contact form processing. Submissions may be forwarded through Formspree's infrastructure before reaching us.
• Render — Website and application hosting. Our servers and databases are hosted on Render's infrastructure in the United States.
• Resend — Transactional email delivery (assessment reports, confirmation emails).
• ElevenLabs — Voice synthesis and transcription for the Thomas AI Advisor's audio features.
• Anthropic — The Thomas AI Advisor uses Anthropic's Claude API to generate responses. Text inputs to Thomas are processed by Anthropic in accordance with their API terms.
• OnceHub — Scheduling platform for booking free consultation meetings.

Each of these providers is bound by their own privacy policies and applicable data protection laws. We do not authorize them to use your data for their own marketing purposes.

4. How Long We Retain Your Information

• Contact form submissions: Retained in our system for up to 24 months for business records and follow-up purposes.
• Newsletter subscriptions: Retained until you unsubscribe.
• Assessment data: Retained indefinitely in anonymized/aggregated form for normative benchmarking. Personally identifiable details are retained for up to 24 months.
• Security/server logs: Retained for up to 90 days.
• Google Analytics data: Governed by Google's retention settings (default 26 months for user-level data).

5. Cookies

The Site uses cookies primarily through Google Analytics. Cookies are small text files stored in your browser. You can control cookies through your browser settings. Disabling cookies will not prevent you from using the Site, but it will limit our ability to understand how visitors use it.

We do not use cookies to track you across third-party websites or to serve targeted advertising.

6. California Residents — Your CCPA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

• Right to Know: You may request a summary of the personal information we have collected about you in the past 12 months, including the categories of information, how it was used, and with whom it was shared.
• Right to Delete: You may request that we delete personal information we hold about you, subject to certain exceptions (such as completing a transaction you initiated or complying with legal obligations).
• Right to Opt Out of Sale: We do not sell personal information. No opt-out is required, but we honor this right regardless.
• Right to Non-Discrimination: Exercising your privacy rights will not result in any difference in the services we offer you.

To exercise any of these rights, contact us at Contact@shift-work.com with the subject line "Privacy Request." We will respond within 45 days.

7. Other U.S. State Privacy Laws

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states with consumer privacy laws may have similar rights to access, correct, delete, or obtain a copy of their personal data. We extend the same request process described above to residents of these states. Contact us at Contact@shift-work.com.

8. Children's Privacy

The Site is intended for business professionals and is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has submitted information to us, please contact us and we will promptly delete it.

9. Data Security

We implement reasonable technical and organizational measures to protect the information we collect, including encrypted connections (HTTPS), server-side access controls, IP-based blocking of abusive traffic, and input validation on all form submissions. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Links to Other Websites

The Site may contain links to third-party websites. This Privacy Policy applies only to shift-work.com. We are not responsible for the privacy practices of external sites and encourage you to review their policies before submitting any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. For significant changes, we may also post a notice on the Site. Continued use of the Site after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise any of your rights, please contact us:

• Email: Contact@shift-work.com
• Phone: (415) 265-1621
• Mail: Shiftwork Solutions LLC, Attention: Privacy, [Mailing Address]