Privacy Policy

Last updated: August 19, 2026

ShiftSecure is an enterprise application operated by High Protection Security (HPS). Access is restricted to registered security companies and their authorized personnel. We are committed to protecting your personal information and being transparent about how we use it.

1. Who We Are

ShiftSecure is operated by High Protection Security (HPS), a security services company. Our platform provides security guard patrol management tools to registered client companies and their security personnel.

For any privacy-related questions, contact us at:
[email protected]
https://shiftsecure.highprotectionsecurity.us

2. Information We Collect

We collect the following categories of information:

Account Information

• Full name and email address
• Company name and business address
• Hashed password (we never store your password in plain text)
• VAT/tax number (optional, collected during onboarding)

Patrol Activity Data

• Checkpoint scan records (which checkpoint was scanned, date and time)
• Device timestamp at time of scan
• Sync status of patrol records

Device & Technical Information

• Device type and operating system version
• App version and session identifiers
• Diagnostic logs generated within the app (for troubleshooting purposes only)

Payment Information

• Payment card details are collected and processed securely by Stripe. HPS never stores raw card numbers. Only a tokenised reference to your payment method is retained.

3. How We Use Your Information

We use the information we collect to:

• Provide and operate the ShiftSecure platform
• Authenticate users and maintain account security
• Record and report patrol activity to your company administrator
• Process subscription payments via Stripe
• Send transactional emails (account activation, password resets, patrol reports)
• Investigate and resolve technical issues using diagnostic logs
• Comply with applicable legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Camera Access

The ShiftSecure mobile app requests access to your device camera solely to scan QR codes on security patrol checkpoints. Camera access is used only while you are actively using the scan feature. We do not capture, store, or transmit images or video from your camera.

5. Offline Data Storage

ShiftSecure operates offline-first. Patrol scan records are stored locally on your device when no internet connection is available and are synced to our servers when connectivity is restored. Locally stored data is protected by your device’s built-in security mechanisms.

6. Data Sharing

We share data only with the following categories of third parties:

• Stripe — for secure payment processing. Stripe’s privacy policy: stripe.com/privacy
• Google — for reCAPTCHA bot protection on public forms. Google’s privacy policy: policies.google.com/privacy
• Your company administrator — patrol scan records and activity logs are visible to the administrator of the company account you are registered under.
• Law enforcement or regulatory authorities — only when required by law or valid legal process.

7. Data Retention

We retain your account data for as long as your account is active or as needed to provide services. Patrol records are retained for the duration of your company’s subscription and for up to 12 months after account closure for compliance and audit purposes.

If you request deletion of your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law.

8. Data Security

We implement industry-standard security measures including:

• All data transmitted over HTTPS/TLS encryption
• Passwords stored using bcrypt hashing — never in plain text
• JWT-based authentication with short expiry windows
• Database access restricted to internal services only — never exposed to the public internet
• Payment data handled exclusively by Stripe — PCI DSS compliant

9. Your Rights

Depending on your location, you may have the following rights:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your personal data
• Portability — request your data in a portable format
• Objection — object to certain types of processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Children’s Privacy

ShiftSecure is an enterprise application intended for use by adults in a professional capacity. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For significant changes, we will notify registered users by email. Continued use of ShiftSecure after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

• Email: [email protected]
• Website: shiftsecure.highprotectionsecurity.us