Privacy Policy

This privacy policy explains how Shiftly ("we", "us", "our") collects, uses, and protects personal data when you visit our website. We are committed to handling your data responsibly and in accordance with the Swiss Federal Act on Data Protection (FADP/nDSG) and the EU General Data Protection Regulation (GDPR).

The entity responsible for processing your personal data is:

We collect personal data only in the following situations:

Contact / Demo Request Form

When you voluntarily submit our contact form, we collect the information you provide:

• Name (required)
• Email address (required)
• Organization name (optional)
• Team size (optional)
• Phone number (optional)
• Message (optional)

Technical Data (Server Logs)

When you visit our website, our hosting provider (Vercel) automatically collects certain technical data such as your IP address, browser type, operating system, and the pages you visit. This data is processed by Vercel to deliver and secure the website and is not accessed or stored by us.

We use the data you submit through the contact form exclusively to:

• Respond to your inquiry or demo request.
• Provide you with information about Shiftly that you have requested.

The legal basis for processing is your consent (Art. 6(1)(a) GDPR) given by voluntarily submitting the form, and our legitimate interest in responding to your request (Art. 6(1)(f) GDPR). Under the Swiss FADP, processing is lawful as it is carried out in connection with a pre-contractual relationship and in good faith.

We use the following third-party services to operate this website:

• Vercel Inc. — Hosts and delivers our website. Vercel may process technical data (IP address, request metadata) to provide its hosting service. Vercel's privacy policy: https://vercel.com/legal/privacy-policy
• Resend Inc. — Delivers the email notification to us when you submit the contact form. Resend processes your name, email address, and form content solely for email delivery. Resend's privacy policy: https://resend.com/legal/privacy-policy

We do not use any analytics, advertising, or tracking services. We do not sell, share, or otherwise transfer your data to third parties beyond what is described above.

Vercel and Resend are US-based companies. Your data may be transferred to and processed in the United States. These transfers are safeguarded by Standard Contractual Clauses (SCCs) and/or other appropriate safeguards as required by applicable data protection laws.

This website uses only one cookie:

• NEXT_LOCALE — Stores your preferred language (en, it, de, fr). This is a strictly functional cookie required for the website to display content in your chosen language. It contains no personal data and is not used for tracking.

We do not use any analytics, marketing, or third-party cookies. No cookie consent banner is required as we only use strictly necessary cookies.

The data you submit through the contact form is delivered to us via email and is not stored in any database. We retain your contact information only for as long as necessary to respond to your inquiry and for any follow-up communication. You may request deletion of your data at any time.

Under the FADP and GDPR, you have the following rights regarding your personal data:

• Right to access your personal data.
• Right to rectification of inaccurate data.
• Right to erasure ("right to be forgotten").
• Right to restriction of processing.
• Right to data portability.
• Right to object to processing.

To exercise any of these rights, please contact us at davidegianatti@gmail.com.

You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if applicable, with your local EU supervisory authority.

This website is not directed at children and we do not knowingly collect personal data from children under the age of 16.

We may update this privacy policy from time to time. Any changes will be published on this page with an updated date. We encourage you to review this page periodically.

If you have any questions about this privacy policy or how we handle your data, please contact us at davidegianatti@gmail.com.