Data Processing Addendum

1. Roles

The Customer decides what personal information about its staff is processed and why. ShiftNivo processes it only on the Customer's behalf, as a processor or service provider under the privacy laws that apply.

2. Instructions

ShiftNivo processes the information only to provide the Service and as the Customer instructs through the Service's settings or in writing. It does not sell or share the information, and does not use it for any purpose of its own outside the Service, including advertising or training artificial intelligence models.

3. Confidentiality and security

• Anyone at ShiftNivo who can reach Customer data is bound to keep it confidential.
• Data is encrypted in transit, and nightly backups are encrypted.
• Each request is checked against the workspace and the person making it; pay data has its own permission.
• Error reports are scrubbed of personal details where possible.
• Changes to schedules are recorded in a change log the Customer can read.

4. Subprocessors

The Customer authorizes these subprocessors:

• Supabase: the database, sign-in and uploaded certificate files. Canada (Montréal).
• Render: runs the web application. United States (Virginia).
• Cloudflare: hosts this website and routes email sent to our addresses. Global network.
• Resend: sends the emails the product writes (invitations, schedules, decisions). United States.
• Sentry: receives error reports, with personal details removed where we can. United States.
• Expo: delivers notifications to the iPhone app. United States.
• Apple: delivers notifications to iPhones and distributes the app. United States.
• GitHub: stores the nightly encrypted backup of the database. United States.

ShiftNivo will update this list at least 30 days before adding or replacing a subprocessor. A Customer that objects may close its workspace before the change takes effect. ShiftNivo remains responsible for its subprocessors' work.

5. Transfers

Customer data is stored and processed in Canada and the United States, as listed above.

6. Requests and incidents

ShiftNivo will help the Customer answer requests from its staff to see, correct or delete their information, and will pass on any such request it receives directly. If ShiftNivo becomes aware of a breach affecting Customer data, it will tell the Customer without undue delay, and within 72 hours of confirming it, with what it knows and what it is doing about it.

7. Return and deletion

When the Customer closes its workspace, ShiftNivo keeps the data for 30 days so it can be exported on request, then deletes it; encrypted backups expire within a further 30 days, unless the law requires otherwise.

8. Information and audits

ShiftNivo will give the Customer the information reasonably needed to show that this addendum is followed. Requests go to hello@shiftnivo.com.