Privacy Policy

Last updated: 11 July 2026

This policy explains how Styrshift (“Styrshift”, “we”, “us”) handles personal information in the Styrshift web application and the Styrshift mobile apps for Android and iOS (together, the “Service”). Styrshift is a workforce-dispatch platform for labour businesses, operated by [Styrshift operating legal entity].

Who controls your data

Styrshift is a business-to-business tool. Each business (a “workspace”) that uses Styrshift decides what information to enter about its workers, customers, and jobs, and is the controller of that information. Styrshift processes it on that business’s behalf to provide the Service. If you are a worker, customer contact, or staff member of one of those businesses, contact them for requests about your data; we will assist them as their processor.

Information we collect

• Account & contact details — name, email address, and (for workers) mobile number, used to sign in and to send job and account notifications.
• Operational records — jobs, sites, shifts, crew assignments, availability, skills/credentials, and job-completion records (times, notes, issues) entered by workspace users.
• Completion photos — images a team lead attaches to a job, stored in private cloud storage and visible only within the workspace that created them.
• Device push tokens — if you enable notifications on the mobile app, a push token so we can deliver job and account alerts to your device.
• Security & audit data — sign-in events, IP address, and user-agent, retained in an append-only audit log to keep the Service secure and to support the workspace.

We do not collect payment card or bank details, andStyrshift contains no payroll, invoicing, or billing functionality. We do not collect device location/GPS. The camera and photo-library permissions on mobile are used only to let you attach a job-completion photo, when you choose to.

How we use information

• To provide the Service — staffing jobs, offers, confirmations, and completion records.
• To send transactional notifications (job offers, confirmations, reminders, account sign-in links) by email and push.
• To keep the Service secure, prevent abuse, and maintain the audit trail.
• To provide support to the workspaces that use Styrshift.

We do not sell personal information, and we do not use it for advertising.

Service providers

We share information only with the infrastructure providers that run the Service, acting on our instructions:

• Vercel — application hosting.
• Neon — the application database.
• Resend — delivery of transactional emails.
• Vercel Blob — private storage for completion photos.
• Google Firebase Cloud Messaging (Android) and Apple Push Notification service (iOS) — delivery of push notifications to your device.
• Anthropic (Claude AI) — when a customer uploads a clearance document (such as a BACC or Customs Delivery Order) to auto-fill a job request, we send that document to Anthropic to read and extract the job details. It is used only to process that upload; it is not used for advertising or to train AI models.

These providers may process data outside your country. We rely on their respective safeguards for any such transfers.

Retention

Operational records are archived rather than deleted, so a workspace keeps an accurate history of work performed. We retain personal information for as long as the workspace uses the Service and as needed for security, dispute resolution, and legal obligations. A workspace can ask us to delete or export its data.

Your choices

• You can turn push notifications off in your device settings at any time.
• You can request access, correction, or deletion of your personal information. If you are a worker or customer contact, we will route your request through your workspace; otherwise contact us directly.

Children

The Service is for workplace use and is not directed to children under 16.

Changes

We may update this policy; we will change the “last updated” date above and, for material changes, notify workspaces.

Contact

Questions or requests: support@styrshift.com. This policy is governed by the laws of [New Zealand / jurisdiction to confirm].