Draft of 8 November 2026. Text in [brackets] will be completed. In case of difference, the Dutch text prevails.
Shifora is operated by Bart Massaer, sole proprietorship trading as Massaer Digital, Leeuwerikstraat 21, 9000 Ghent, Belgium, company number 1044.562.217. For privacy questions, email info@shifora.be.
For the data an organisation puts in Shifora (rotas, preferences, leave, hours, evaluations, messages, personal data of its members), the organisation is the controller and we are the processor. We then only follow its instructions, as agreed in article 7 of the terms and conditions. For a question about that data, go to your organisation first; we help it.
For what we decide ourselves, we are the controller: your account and signing in, the website for visitors, the administrators and invoicing of organisations, participants without an account in a date poll or vote, and questions via Help and feedback. This statement is about that.
| Data | Why | Legal basis |
|---|---|---|
| Name, email address, password (encrypted), language | Your account and signing in | Contract |
| Name, address, VAT number and payment details of the organisation | Subscription, invoices and accounting | Contract and legal obligation |
| IP address, time, bot check when signing up | Security and preventing abuse | Legitimate interest |
| Name and answers of a participant without an account, and a cookie to find those answers again | A date poll or vote | Legitimate interest of whoever creates the poll |
| Your question or feedback and your contact details | Support and improving Shifora | Legitimate interest |
| Usage figures without names (number of organisations, shifts) | Monitoring and improving Shifora | Legitimate interest |
We only use an organisation's data to provide and secure Shifora. We sell nothing and show no ads. Each organisation is separated from the others in the database. We only look in when the administrator grants support access; every look is logged and visible to the administrator.
Do not put medical reasons or health data in Shifora, not even for a temporary unavailability: the impact on the rota is enough.
Shifoor (the assistant), the AI text boxes and the rota proposal use Claude from Anthropic. What you ask and the data needed to answer go to Anthropic in the United States. Shifoor never sees more than you are allowed to see yourself. The rota proposal sends codes instead of names.
Anthropic does not use this data to train its models. An administrator can turn off all AI features for the organisation (Admin > Organisation). The AI never decides on its own: a proposal is only applied once someone confirms it.
We work with the subcontractors below. With each of them, agreements under the GDPR apply. When data leaves the European Economic Area, this happens under the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
| Subcontractor | Role | Location |
|---|---|---|
| Supabase | Database, sign-in, files and backups | [check EU region] |
| Vercel | Website hosting and the computing for the schedule solver | Ireland (Dublin), with network in EU and US |
| Resend | Sending emails | US |
| Anthropic | AI features | US |
| Stripe | Payments (Paid only) | EU and US |
| Cloudflare | Bot check when signing up, monitoring of scheduled tasks | EU and US |
| Notion | Copy of data, only for an organisation that uses the integration | US |
| WhatsApp (Meta) | Messages, only for a Custom organisation that chose it | EU and US |
| Google (YouTube) | Videos, only after you click play | EU and US |
| Google, Apple, Mozilla | Push notifications on your phone, encrypted | EU and US |
| Data | Period |
|---|---|
| Your account | Until you delete it (Settings > Danger zone) or your organisation deletes it |
| Personal data of people no longer active in an organisation | By default 12 months after leaving; the organisation can change this |
| Evaluations about people no longer active | By default 5 years after leaving; the organisation can change this |
| Conversations with Shifoor | 90 days after last use, visible only to you |
| A date poll and the replies of participants without an account | Until the organisation deletes it, at most 12 months after the last date |
| Support access | 7 days, unless the administrator revokes it sooner |
| Logs (support access, sign-in links, AI usage) | 12 months |
| Error reports in the server logs, without email addresses | As long as Vercel keeps them [to be checked] |
| A deleted organisation | Permanently gone after a 14-day waiting period |
| Backups | [7] days, then overwritten |
| Invoices | As long as accounting law requires [7 or 10 years, to be checked with the accountant] |
Shifora only uses cookies and local storage needed to make the site work: to stay signed in, remember your language and theme, remember a step in setting up an organisation and find your answers in a date poll again. No consent is needed for that. We use no cookies for statistics or advertising. A YouTube video only loads when you click play.
| Name | What for | How long |
|---|---|---|
| sb-…-auth-token | Your sign-in (Supabase) | As long as you stay signed in |
| shifora-kortdurend | Remembers that you do not want to stay signed in on a shared device | Session |
| shifora-profiel | Signed memory of your role, so pages load faster | 5 minutes |
| shifora-taal | Your chosen language | 13 months |
| shifora_instap | Remembers which link you started from (e.g. the date poll) | 7 days |
| shifora-prikker-… | Lets you change your own reply in a date poll, without an account | 1 year |
| theme (browser storage) | Your choice of light or dark theme | Until you clear it |
You have the right of access, rectification, erasure, restriction, portability and objection. Much of this you can do yourself in Shifora: download your data and delete your account under Settings, change your data under Settings > My details.
If it concerns your organisation's data, ask its administrator. For everything else, email info@shifora.be; we answer within a month. If you are not satisfied, you can lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels, contact@apd-gba.be, www.dataprotectionauthority.be.
Connections are encrypted, each organisation is separated from the others in the database, and a backup is made every day. In case of a personal data breach, we notify the organisation's administrator within 48 hours and, where needed, the Data Protection Authority and those affected.
Shifora is for working people and their organisations. We do not knowingly ask for data from children under 16.
If this statement changes materially, we announce it in Shifora under What's new. The date at the top shows the latest version.
