Privacy policy.

ShiftReady Pty Ltd (ABN to be added) — “ShiftReady”, “we”, “us” — takes privacy seriously. We are bound by the Privacy Act 1988 (Cth) and the thirteen Australian Privacy Principles (APPs). This policy explains what we collect, why, and what your rights are.

1. What we collect

Account information. Business name, your name, email, phone (optional), and billing details. Billing is handled by Stripe — we don't store full card numbers.

Content you upload. Handbooks, procedures, SOPs, images and any other documents you upload to generate training. This is your content and belongs to you.

Training module data. The modules we generate from your uploads, learner email addresses or phone numbers you add, quiz responses, and completion records.

Usage data. Basic analytics — which pages were viewed, when, from what device class. We use this to improve the product, not to profile individuals.

Support communications. Emails and support tickets you send us.

2. Why we collect it

• To provide the service you've signed up for
• To process payments (via Stripe)
• To send your staff the training links you've asked us to send
• To give you reporting on completion and quiz results
• To keep the product secure and diagnose bugs
• To send product updates — you can opt out at any time

3. Where it lives

Customer data is stored in Sydney, Australia (AWS ap-southeast-2 via Supabase). We do not transfer customer content outside of Australia without your explicit consent.

Some infrastructure providers — Stripe for payments, Vercel for our marketing site, Google Workspace for email — operate globally and may process limited metadata (e.g. email addresses, billing records) outside Australia. We select providers that meet the APP 8 cross-border requirements.

4. AI and your content

Your uploads and your training content are never used to train any AI model— ours or anyone else's. We pass content to a foundation model (currently Anthropic) purely to generate your draft training modules. Those calls are governed by the provider's zero-retention API terms.

5. Who we share it with

We share data only with service providers that need it to deliver the product:

• Supabase — database hosting (Sydney)
• Stripe — payment processing
• Vercel — web hosting
• Anthropic — AI model inference for module drafting
• An email/SMS provider — for sending training links to your staff

We do not sell your data. Ever. We do not share it for advertising. If compelled by Australian law to disclose data, we will — and we will tell you where we're legally able to.

6. Your rights

Under the Privacy Act and APPs you can:

• Access the personal information we hold about you
• Correct anything that's wrong
• Delete your account and associated data
• Export your uploaded content and training modules
• Complain to us — and, if unsatisfied, to the Office of the Australian Information Commissioner (OAIC)

Email hello@shiftready.com.au for any of these. We aim to respond within 5 business days.

7. Retention

Account data is kept while your account is active. After you close the account we retain it for 30 days in case you want to come back, then delete it. Billing records are kept for 7 years to meet ATO requirements.

8. Security

See our security page for technical detail. In summary: encrypted in transit (TLS), encrypted at rest, access controlled by role, staff access limited to support cases only and logged.

9. Cookies and analytics

We use strictly-necessary cookies for session management. We also use Google Analytics 4 (GA4) to understand how the site is used in aggregate — which pages are visited, where visitors come from, how the trial sign-up funnel is performing. GA4 sets a small number of first-party cookies for this purpose.

We do not use advertising or remarketing cookies, and we do not sell visitor data. IP addresses are anonymised before being processed by Google. You can opt out of GA tracking site-wide using the official Google Analytics opt-out browser add-on or by blocking analytics cookies in your browser settings.

10. Contact

Privacy questions or requests: hello@shiftready.com.au.

Unhappy with our response? Complain to the Office of the Australian Information Commissioner (oaic.gov.au).