Privacy Policy
How we handle your data
At shiftfold, we take your privacy seriously. This policy explains what data we collect, why we collect it, and how we protect it. We comply with the GDPR and the German Federal Data Protection Act (BDSG).
Your rights
Under the GDPR, you have the following rights regarding your personal data at any time:
Access: You can request information about what data we have stored about you, for what purpose, and to whom it has been disclosed.
Rectification: You can request the correction of inaccurate data.
Erasure: You can request the deletion of your data, provided no statutory retention obligations apply.
Restriction: You can request that we limit the processing of your data, for example if you dispute its accuracy.
Data portability: You can receive your data in a structured, commonly used, and machine-readable format, or request its transfer to another provider.
Objection: Where we process data on the basis of a legitimate interest, you can object. We will then stop processing unless we can demonstrate compelling grounds.
To exercise any of these rights, contact us at: support@shiftfold.com
Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority, in particular the one at your place of residence or employment. For Berlin, this is the Berlin Commissioner for Data Protection and Freedom of Information.
What data do we collect?
When you visit our website
Our website is delivered through the Bunny.net content delivery network (Slovenia, EU). Your IP address is technically processed in order to deliver the page to you. Access logs are disabled. No personal data is stored.
When you sign up for early access
We store your email address to notify you about the launch of shiftfold and product updates, based on your consent. We use a double opt-in process: you receive a confirmation email, and your address is only added once you click the link. If you do not confirm within 24 hours, your data is automatically deleted after 90 days.
You can unsubscribe at any time by emailing support@shiftfold.com or using the unsubscribe link in any of our emails.
Email analytics
Our emails may contain tracking pixels and individualized links to help us understand whether emails are opened and which links are clicked, based on the consent you gave when signing up. This data is pseudonymized and not linked to other personal data. You can prevent tracking by disabling external images in your email client. Unsubscribing also ends all tracking.
When you contact us
When you send us an email, we process your email address, your name (if provided), and your message based on our legitimate interest in responding to your inquiry. We use this solely to handle your inquiry and delete it once resolved, unless statutory retention obligations apply.
How we protect your data
All data between your browser and our servers is transmitted via encrypted connections. Access to personal data is restricted to those who need it to provide our services.
How long we retain your data
We only store personal data for as long as necessary or as required by law. Waitlist addresses are stored 12 months or until you unsubscribe. Server logs are deleted after 30 days or shorter. Contact inquiries are deleted after the matter is resolved, unless retention obligations apply (6 years under commercial law, 10 years under tax law).
Web analytics
We use Umami, a privacy-minded analytics tool that we run on our ISO 27001 certified provider (bunny.net) in Germany. Umami does not collect personal data, does not set cookies, and does not store IP addresses. All data is fully anonymized. No data is shared with third parties.
Cookies
We only use technically necessary cookies, for example to retain your language settings. Session cookies are deleted when you close your browser. We do not use cookies for advertising or tracking.
Sharing your data with service providers
We do not share your personal data with third parties, except where necessary to provide our services. The following providers process data on our behalf.
Bunny.net (website delivery)
Bunny.net delivers our website through its content delivery network. Technical connection data is processed to serve pages quickly and reliably. Bunny.net is based in the EU (Slovenia). Privacy policy
Brevo (email delivery)
Brevo handles the delivery of our waitlist emails. Your email address is stored on Brevo's servers in the EU (France).
Cloudflare Turnstile (bot protection)
We use Cloudflare Turnstile to protect our sign-up form from automated abuse. Technical data is transmitted to Cloudflare for this purpose. Cloudflare is based in the USA
Google Workspace (email hosting)
Our emails are handled via Google. Data is stored in the EU. Google is based in the USA.
Changes to this privacy policy
We may update this policy from time to time. The current version is always available on this page.
Questions?
For more questions, contact us at support@shiftfold.com
Last updated: 2026-03-03