Privacy Policy

Last updated: July 15, 2026

ShiftBee ("we", "the service") is a shift-scheduling service for small businesses. This policy explains what data we collect, why, where it lives, who it goes to, and how to delete it. We operate in accordance with Israel's Protection of Privacy Law, 1981 and its regulations.

What we collect

How we use it

Solely to operate the service: signing you in, building the weekly schedule, sending notifications when a schedule is published or a shift changes, answering enquiries, and fixing bugs. We do not sell or rent data, and we do not use it for advertising or profiling.

Cookies and local storage

We do not use cookies for tracking or advertising. The site and app use local storage (localStorage / secure device storage) to keep your sign-in token and preferences — this is essential to running the service and nothing more.

Who processes it for us

International data transfer

Some of the providers above (including Supabase, Sentry, Resend and OpenRouter) run servers outside Israel, so your data may be processed and stored outside Israel, including in countries whose privacy protections may differ. Using the service constitutes consent to such transfer for the purpose of operating the service, subject to the Protection of Privacy Law and the regulations on transferring data abroad.

Managers and employees

Employee data within a business is entered and managed by that business's manager, who is the controller of it; ShiftBee acts as a processor on their behalf. If you are an employee and want to review, correct, or delete your data, contact your manager first — or reach us directly.

Your rights

Under the Protection of Privacy Law you have the right to review the data we hold about you, to request corrections if it is inaccurate, and to request its deletion. You can exercise any of these from inside the app, or by emailing hello@shiftbee.co.il. We will handle the request within 30 days.

Retention and deletion

Data is kept while the account is active. You can delete your account at any time inside the app (Settings → Delete account) — deletion removes the user and their personal data. Anonymous technical logs may be retained for a short period for security and maintenance.

A demo request sent through the form on our website (name, phone number and business name) is kept for up to 12 months so we can get back to you, even if no account is ever opened. You can ask us to delete it at any time at hello@shiftbee.co.il and we will do so within 30 days.

Security

Data access is restricted by database-level permissions (RLS), traffic is encrypted (HTTPS), and we store no passwords — sign-in uses a one-time code. That said, no system is completely immune, and we cannot guarantee absolute security.

Minors

The service is intended for businesses and their managers. If an employee whose data is entered is a minor, the employer must ensure the appropriate consent to enter their data exists under applicable law.

Changes

If this policy changes materially we will update the date above and notify you in the app.

Contact

For any privacy question, reach us at hello@shiftbee.co.il