Privacy Policy

1. Who We Are

ShiftBridge is a workforce management platform developed and operated by Fashaw Morgan Digital ("we", "us", "our"). We provide tools for employers, contractors and workers to manage hours, scheduling, payroll and attendance.

Our platform is accessible at shiftbridge-fmd.com.

For privacy inquiries, contact us at: privacy@shiftbridge-fmd.com

2. Data We Collect

Account and Identity Data

• Full name, email address, and password (hashed — never stored in plain text)
• Company name, business unit details, EIN and legal entity information (for employers)
• Contractor W-9 information including TIN (encrypted at rest)
• Employee name, Employee ID, pay rate and employment status

Attendance and Time Clock Data

• Clock-in and clock-out timestamps
• Break start and end times
• Location of punch (which kiosk device was used)
• PIN codes used for kiosk authentication (hashed — never stored in plain text)
• Exception flags (early, late, no schedule, etc.)

Biometric Data — Facial Recognition

• The employee's facial biometric data is captured via the kiosk device camera
• A unique facial identifier (faceId) is generated and stored by FaceIO on their secure servers
• ShiftBridge stores only the FaceIO-assigned faceId — we do not store raw facial images or biometric templates on our servers
• Facial data is processed and stored by FaceIO in accordance with their Privacy Policy and Terms of Service
• Biometric enrollment requires explicit consent from the employee prior to enrollment
• Employees may request removal of their facial biometric data at any time by contacting their employer or administrator

By using the facial recognition feature, employees consent to the collection and processing of their facial biometric data as described above and as governed by FaceIO's privacy terms.

Scheduling and Payroll Data

• Shift schedules (dates, times, locations)
• Hours worked, pay rates, and gross payment amounts
• Invoice numbers and payment records
• Week cycle status and approval history

Device and Technical Data

• Kiosk device registration tokens (stored locally on the device)
• Device last-seen timestamps
• Browser type and IP address (standard server logs)

3. How We Use Your Data

• To authenticate users and verify identity at kiosk devices
• To record, track and report employee attendance and hours worked
• To process payroll calculations and generate payment records
• To send automated notifications (hours approval, cycle status, disputes)
• To generate tax documents including 1099-NEC statements
• To maintain a complete audit trail for compliance purposes

We do not use your data for advertising, profiling or any purpose beyond operating the ShiftBridge platform.

4. Camera and Permissions

The ShiftBridge kiosk application requests the following device permissions:

• Camera access — required for facial recognition enrollment and authentication via FaceIO. The camera is only activated when the employee initiates a biometric action. You may decline camera access and use PIN-based authentication instead.
• Local storage / cookies — used to store the kiosk device registration token so the device does not need to be re-registered on every page load.

Camera access is never used passively or in the background. It is only activated by explicit user action.

5. Data Sharing

We share data only in the following circumstances:

• FaceIO — facial biometric data is processed by FaceIO as described in Section 2. FaceIO is bound by their own privacy policy and GDPR/CCPA compliance frameworks.
• Within your organisation — employers, administrators and supervisors can access data for employees and contractors within their account.
• Legal requirements — we may disclose data if required by law, court order, or regulatory authority.

We do not sell, rent or trade personal data to third parties.

6. Data Retention

• Account data is retained for the duration of the active account and up to 3 years after closure for compliance purposes
• Attendance and payroll records are retained for 7 years to meet standard employment record-keeping requirements
• Biometric facial data held by FaceIO is subject to FaceIO's retention policy — employees may request deletion via their employer
• TIN and EIN data is retained for tax compliance purposes in line with IRS requirements

7. Your Rights

Depending on your location, you may have the following rights:

• Access — request a copy of the data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your personal data (subject to legal retention requirements)
• Biometric deletion — request removal of your facial biometric data from FaceIO's systems
• Opt-out of facial recognition — use PIN-based authentication instead at any time

To exercise any of these rights, contact your account administrator or email us at privacy@shiftbridge-fmd.com.

8. Security

• All data is transmitted over HTTPS/TLS encryption
• Passwords and PINs are hashed using bcrypt — never stored in plain text
• TIN numbers are encrypted at rest using AES encryption
• Kiosk device tokens are long random strings with no embedded user data
• Access to sensitive data is restricted by role (admin, supervisor, employee)

9. Children

ShiftBridge is not intended for use by individuals under the age of 18. We do not knowingly collect data from minors. If you believe a minor has been registered on the platform, contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of ShiftBridge after changes constitutes acceptance of the updated policy.

11. Contact

For privacy questions or data requests:

• Email: privacy@shiftbridge-fmd.com
• Platform: shiftbridge-fmd.com
• Operated by: Fashaw Morgan Digital