Privacy

Sjift operates from the Netherlands. Contact team@sjift.app. Sjift is responsible for processing for accounts, payments, security and its own website use. For personal data in business knowledge, your organisation determines the purpose; Sjift processes it to provide the service to that organisation.

• Account and team: email, name or preferred name, language, business memberships, role, permissions and any access end date.
• Setup: business name, your description and role, the website you provide and relevant public information from it.
• Business knowledge: text, photos, documents, audio, video, instructions, proposals, additions and approvals you add.
• Conversations and Practice: questions, answers, corrections, exercise results and usage signals needed for knowledge and exercises in your business.
• Technical and payment data: usage counters, security and error information, billing details, payment status and transaction records. Stripe processes card details.

We process data to provide your account and the service, manage team access, organise knowledge and enable questions and exercises. Contract performance is the basis for our account processing. Security and fault investigation rely on our legitimate interests, taking your privacy into account. Legal obligations apply to financial records, among other things. Where consent is required, it must be separately and validly obtained.

Your organisation must have its own valid basis for personal data it adds and inform those involved. Sjift does not sell your business knowledge or itself use it to train public AI models.

The bounded introduction is for signed-in users. Photos, additions and exercise answers are processed to run the test, but are not saved as a business or business knowledge. Usage counters are retained for limits and security. Closing or leaving clears the content from the temporary conversation experience; processing by the AI provider follows its applicable terms.

Sjift uses Google Gemini for AI processing through our own connection. A request may send your question, relevant business knowledge, photos, documents, audio or selected camera frames to Google. Setup may read the website you provide; internet searches may be processed by the provider.

AI information is a proposal. Authorised people review what becomes business knowledge. Sjift does not use your business knowledge as a source for another business. The provider processes requests under the applicable service terms and privacy arrangements; its retention and usage depend on the service and settings used.

Voice may be sent directly as audio to the AI provider and need not appear as an on-screen transcript. Camera features may send selected images. Media you add to knowledge may be stored with that item. A temporary live conversation is not automatically a saved recording.

Add only necessary personal data. Inform people before photographing or recording them and ensure a valid legal basis. You can request removal of saved items.

Access to business knowledge follows membership and permissions within the business. Businesses are separated. Sjift and necessary service providers may process data for hosting, storage, email, AI, payments and support.

We use Lovable Cloud for app infrastructure, Google for Gemini and Analytics, our email service for account and team emails, and Stripe for payments. Processing outside the European Economic Area is subject to applicable transfer safeguards, such as adequacy decisions or standard contractual clauses where required.

Business knowledge is retained while needed to serve your business. The end of the free trial does not delete it. Saved media may form part of that knowledge; there is no single automatic expiry date for all recordings.

The main manager can clear knowledge for a fresh start or delete the business. You can also delete your own account. Contributions used as knowledge by an existing or transferred business may remain; requests about personal data within them are considered separately.

Deletion actions remove the relevant data from the active service. Residual files, backups, security logs and provider-held data may have separate retention periods. We retain these no longer than needed for their purpose or a legal obligation. This policy does not promise a guaranteed deadline for complete backup erasure. Where required by law, financial records are kept for seven years. Email team@sjift.app for a complete deletion request.

An expired or ended team membership closes access to the business. We do not ask why. You can still request deletion of your own account. Business knowledge remains with the organisation. Ask that organisation or Sjift to correct or remove personal details within it.

Sjift uses local storage and necessary session data for sign-in and language preferences. Google Analytics is also connected to measure visits, including page views and usage events. Depending on browser and settings, Analytics may process cookies and device or network data.

Browser settings can restrict cookies. Applicable consent rules govern non-essential measurement.

We limit access by account and permissions and use secure connections. Security is not an absolute guarantee. If a data breach occurs, we take action and notify affected people and the regulator when required by law.

• You may request access, correction, deletion or a copy of your personal data.
• Where applicable, you may object, restrict processing or withdraw consent.
• Email team@sjift.app. We normally respond within one month; we inform you if a lawful extension is needed.
• You can also contact your organisation about personal data in business knowledge. You may complain to the Dutch Data Protection Authority.

Sjift is intended for work, not for children under sixteen. We update the date when this policy changes and inform account holders of material changes.