ShiftSideKick Privacy Notice

1. Who This Notice Covers

This Notice applies to information processed through ShiftSideKick, including:

• customer organization accounts;
• administrators and authorized users;
• Employee and other workforce profiles managed in the product; and
• billing and subscription information related to paid plans.

Customers decide what workforce information to enter into ShiftSideKick and remain responsible for providing appropriate notices to their workers where required. Nebijane processes that information to provide ShiftSideKick to the customer, as described in this Notice and the ShiftSideKick Terms of Service.

2. Information We Handle

Depending on how an organization uses ShiftSideKick, we may process categories such as:

• account identity and contact information (names, email addresses, login credentials);
• organization and business information (business name, locations, roles, settings);
• Employee and workforce profile information;
• schedules and shifts;
• availability, time-off, open-shift, coverage, and other workforce-request information as implemented;
• time-clock and punch / time-record information as implemented;
• administrative access and permission information;
• support communications;
• application, device, log, and security-related technical information; and
• billing, customer, subscription, invoice, and limited payment-method metadata.

We do not claim that every possible future feature exists today. Only information related to features actually used by the customer is processed.

If first-party product analytics or non-essential cookies are introduced, this Notice should be updated to describe them accurately.

3. Payment Processing

Nebijane uses third-party payment processors such as Stripe for paid ShiftSideKick subscriptions.

Payment-card information may be collected and processed directly by Stripe (or another payment processor) depending on the checkout flow.

Nebijane does not intend to store complete payment-card numbers when payments are handled through Stripe Checkout or other Stripe-hosted payment handling.

Nebijane may receive related billing information such as:

• customer identifiers;
• subscription and plan status;
• invoice and payment status; and
• limited payment-method metadata (for example, card brand or last four digits) where provided by the processor.

See also the Billing, Cancellation & Refund Policy.

4. Affiliate Referral Tracking

Nebijane operates an affiliate program in which approved affiliates may refer new customers to ShiftSideKick. Affiliate referral tracking is not yet enabled for public use in ShiftSideKick. This section describes how it works when it is enabled.

When affiliate referral tracking is enabled and you arrive at ShiftSideKick through a valid Nebijane affiliate referral link, ShiftSideKick may set a first-party cookie named ssk_aff_click. This cookie:

• stores only a randomly generated referral click token, in encrypted form, and does not contain your name, email address, or the affiliate’s identity;
• is used only to attribute a new ShiftSideKick account signup to the affiliate referral that led to it;
• is set by ShiftSideKick for its own website and lasts for approximately 30 days;
• is replaced if you later follow a different valid referral link; and
• is removed after a new ShiftSideKick account signup has been recorded.

The cookie is not used to build advertising profiles or to track you across other websites.

If a new ShiftSideKick account is created while a valid referral cookie is present, ShiftSideKick may send Nebijane’s affiliate program systems the referral click token, the ShiftSideKick organization identifier, and the registration time, so that the signup can be attributed to the referring affiliate. This attribution message is designed not to include the customer’s name, email address, phone number, or postal address.

How Nebijane handles referral-click and attribution records is described in the Nebijane Privacy Policy.

5. How We Use Information

We use ShiftSideKick information to:

• provide and operate ShiftSideKick;
• authenticate users and protect accounts;
• support scheduling, timekeeping, and workforce features as implemented;
• provide customer support;
• process billing and subscriptions;
• detect fraud, abuse, and security threats;
• improve product reliability and usability; and
• comply with legal obligations.

We do not sell personal information as a business model.

6. Service Providers and Processors

Nebijane may use service providers to host, secure, deliver, support, or bill the service. These may include:

• hosting and infrastructure providers;
• email and communications providers;
• payment processors such as Stripe; and
• other vendors needed to operate ShiftSideKick securely and reliably.

Providers are expected to process information only as needed to perform their services for Nebijane.

7. Data Retention

We retain ShiftSideKick information for as long as reasonably needed to provide the service, maintain customer accounts, meet legal or accounting requirements, resolve disputes, and protect security.

Cancellation of a paid plan does not automatically delete organization or workforce data. Fixed public retention schedules may be published later when product rules support them.

8. Security

Nebijane uses reasonable administrative, technical, and organizational measures appropriate to a business SaaS product.

No method of transmission or storage is completely secure. We do not claim absolute security or unsupported certifications.

9. Legal Disclosures

We may disclose information when reasonably necessary to:

• comply with law, legal process, or government requests;
• enforce agreements;
• protect Nebijane, customers, users, or the public from fraud, abuse, or security threats; or
• evaluate or complete a business transaction involving Nebijane, subject to applicable law.

10. Customer and Workforce Responsibilities

Customers control much of the workforce information entered into ShiftSideKick.

Customers are responsible for:

• using the service lawfully;
• providing required notices to workers; and
• configuring access permissions appropriately.

11. Privacy Requests and Rights

Depending on where you live and the laws that apply, you may have rights regarding personal information about you.

Workforce members should generally start with their employer or organization administrator for requests about information the organization controls in ShiftSideKick.

You may also contact Nebijane through the Contact page and choose Privacy or legal. We may need to verify identity and customer authority before completing certain requests.

12. Children and Minor Workers

ShiftSideKick is a business workforce product. It is not directed to children, and children are not intended to use it as consumers or to create customer accounts.

Business customers may maintain workforce records about workers they lawfully employ, which in some cases may include workers who are under 18. Customers are responsible for handling any such information in accordance with applicable law, including employment and privacy laws that apply to minor workers.

13. Changes to This Notice

We may update this Privacy Notice as ShiftSideKick, our providers, or legal requirements change.

When we make material changes, we will update the effective date shown above.

14. Contact

Nebijane LLC

For privacy questions about ShiftSideKick, use the Nebijane Contact page and select Privacy or legal.

Related documents:

• ShiftSideKick Terms of Service
• Billing, Cancellation & Refund Policy
• Nebijane Website Privacy Policy