Privacy Policy

Last updated: January 31, 2026

NG Technologies ("we", "us", or "our") operates CareShift (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you consent to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

Information You Provide

• Account Information: Name, email address, phone number, company name, password
• Employee Information: Names, roles, hourly rates, PIN codes for employees you add to the system
• Location Information: Work location addresses and GPS coordinates
• Payment Information: Billing address and payment details (processed securely by our payment provider)

Information Collected Automatically

• GPS Location Data: When employees clock in/out, we collect their device's GPS coordinates to verify their location
• Time Records: Clock in/out times, duration of shifts, location at time of clocking
• Device Information: Device type, operating system, browser type, IP address
• Usage Data: Features used, pages visited, actions taken within the Service

2. How We Use Your Information

We use the collected information for the following purposes:

Purpose	Data Used
Provide the Service	Account info, employee data, time records, GPS data
Verify clock in/out locations	GPS coordinates, work location addresses
Generate payroll reports	Time records, hourly rates
Process payments	Payment information, billing address
Send service notifications	Email address, phone number
Improve the Service	Usage data, device information
Customer support	Account info, communication history

3. GPS and Location Tracking

Location tracking is a core feature of CareShift. Important points:

• When collected: GPS data is only collected at the moment of clock in and clock out
• Not continuous: We do NOT continuously track employee locations throughout the day
• Purpose: To verify employees are at designated work locations
• Employee consent: You (the employer) are responsible for obtaining appropriate consent from your employees before using location tracking features
• Opt-out: Employees can still clock in/out without GPS, but entries will be marked as "unverified"

4. Data Sharing and Disclosure

We do NOT sell your personal information. We may share data in the following circumstances:

• Service Providers: With third parties who help us operate the Service (hosting, payment processing, analytics) under strict confidentiality agreements
• Legal Requirements: If required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share information

Third-Party Services We Use

• Railway: Cloud hosting (servers located in the United States)
• Stripe: Payment processing (PCI-compliant)
• OpenStreetMap/Nominatim: Address geocoding (no personal data shared)

5. Data Retention

We retain your data as follows:

• Active accounts: Data is retained while your account is active
• Time records: Retained for 7 years to support tax and labor law compliance
• Cancelled accounts: Data is deleted within 90 days of account closure, unless legally required to retain it
• Backup copies: May exist in backups for up to 30 additional days

6. Data Security

We implement industry-standard security measures:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Secure password hashing (bcrypt)
• Regular security updates and monitoring
• Access controls and authentication

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Export: Request your data in a portable format
• Opt-out: Unsubscribe from marketing communications

To exercise these rights, contact us at support@careshift.us.

8. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information (we do not sell data)
• Right to equal service and price

9. Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it immediately.

10. International Data Transfers

Our servers are located in the United States. If you are accessing the Service from outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new policy on this page
• Updating the "Last updated" date
• Sending an email notification for significant changes

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

NG Technologies
Email: support@careshift.us
Everett, Washington, USA

For data protection inquiries, please include "Privacy" in the subject line.