1. Introduction
Shiftly is operated by William Flavel (ABN 66 525 260 843), based in Perth, Western Australia. We are committed to protecting the privacy of our users in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
This policy explains what information we collect, how we use it, and your rights in relation to it. By using Shiftly you agree to the practices described in this policy.
2. Information We Collect
We collect only the information necessary to provide the Shiftly service. This includes:
- Your WhatsApp phone number
- Your full name and Australian Business Number (ABN)
- Shift details you provide, including dates, times, locations, and support descriptions
- Participant names and NDIS numbers provided by you
- Voice notes you send for transcription (not retained after processing)
- Payment information processed by Stripe (we do not store card details)
3. How We Use Your Information
Your information is used solely to deliver the Shiftly service:
- To generate NDIS-compliant progress notes and tax invoices from your shift details
- To send completed documents to you via WhatsApp
- To process subscription payments
- To comply with NDIS record-keeping requirements
We do not sell, rent, or share your personal information with third parties for marketing purposes.
4. Data Storage
Your data is stored securely using Supabase, a cloud database platform. Where possible, data is hosted on servers located in Australia. Data is encrypted in transit (TLS) and at rest.
Access to your data is restricted to authorised systems and personnel only.
5. Third-Party Services
Shiftly relies on the following third-party services to operate. Each has its own privacy policy:
- Twilio — WhatsApp messaging infrastructure
- OpenAI — Voice note transcription via Whisper
- Anthropic — AI processing for progress note generation
- Stripe — Subscription payment processing
We share only the minimum information required with each provider and do not authorise them to use your data for their own purposes.
6. Data Retention
Shift records, progress notes, and invoices are retained for 7 years to comply with NDIS record-keeping requirements under the NDIS (Provider Registration and Practice Standards) Rules 2018.
Voice notes are processed in real time and are not stored beyond the duration of the transcription request.
7. Your Rights
You have the right to:
- Request access to the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your data (subject to our legal retention obligations)
To exercise any of these rights, contact us at hello@getshiftly.com.au. We will respond within 30 days.
8. Contact
For any privacy-related questions or concerns, please contact:
Shiftly Privacy
hello@getshiftly.com.au
Perth, Western Australia