Privacy Policy

Who we are

ShiftHands (“ShiftHands”, “we”, “us”) is operated by [Company legal name], [Address]. This policy covers shifthands.com, the ShiftHands web app, the ShiftHands Mac app and the emails and notifications we send (together, the “Service”).

Questions about your data go to support@shifthands.com.

How ShiftHands works

ShiftHands has three parts, and your data is handled differently in each:

• Your Mac (the agent host). Your agents run in the ShiftHands Mac app on a Mac you own. Chats, agent memory, files, browser work and your AI sign-ins live there.
• Our servers. They keep your account, your workspace setup (projects, agents, automations, settings) and the list of Macs and browsers you’re signed in on, so every device shows the same workspace.
• The relay. When you use ShiftHands from a browser or phone, the relay passes that live traffic between your browser and your Mac over an encrypted connection. It streams it through in memory and does not save what you send or receive.

What we collect and keep on our servers

Account

• Your email address and display name, your time zone, and your plan.
• A salted hash of your password (never the password itself).
• Security settings: an encrypted two-step verification secret, hashed recovery codes, passkey public keys, and short-lived hashed codes for password resets and email sign-in.

Sessions and devices

• Signed-in sessions: a hashed session token, the browser or app name (user agent), how you signed in, and when it was last used.
• Macs you connect: the name you give it, model, macOS and app version, a basic hardware summary, and whether it is online, asleep or closed.

Workspace

• Projects, agents (name, role, instructions, model choice and approval settings) and automations (name, schedule, task text and status).
• Messages you send to an agent while your Mac is offline. They wait on our servers and are deleted as soon as your Mac picks them up (or when you cancel them).
• Your preferences, including notification and email settings.

Connections

• Which AI accounts you connected (for example “Claude, Max plan”) and the account name or email that provider shows, so you can tell accounts apart.
• Whether an API key is set for a provider (a yes or no only; the key itself stays on your Mac), and the list of models your Mac reports as available.
• The address of any inbox you connect.
• If you turn on notifications: the push address your browser gives us for that device.

Other

• Waitlist: your email address if you ask to be told when a download is ready.
• Pro reservations: the plan and billing period you chose if you tap “Reserve Pro”. No payment details are collected today.
• Security and abuse prevention: short-lived counters tied to your network address (IP address) to limit sign-in and sign-up attempts.
• Support: whatever you send us when you email support.
• Site analytics: [Confirm: Cloudflare Web Analytics is on] aggregate page-view counts from Cloudflare Web Analytics, which does not use cookies or track you across sites.

We only collect payment information once paid billing launches, and then through our payment provider (see Service providers).

What stays on your Mac

The following are kept on the Mac that runs your agents and are not stored on our servers:

• Your chats and chat history, and your agents’ memory and working files.
• Your Claude Code and ChatGPT/Codex sign-ins.
• API keys you add (for example OpenRouter, OpenAI or DeepSeek), stored in the macOS Keychain.
• Browser sign-ins made inside Ego Lite, and any local models.

When you use ShiftHands from a browser or phone, that content passes through the relay on its way between you and your Mac, but it isn’t saved there. The web app also keeps message drafts, your theme and recent chats in your browser’s own storage so it opens fast.

You control your Mac. Anyone with access to it may be able to see this data, and it stays there until you delete it or remove the app and its data.

How we use your information

• To run the Service: sign you in, sync your workspace between devices, route your messages to your Mac and run your automations on schedule.
• To send the emails and notifications the Service needs (see below).
• To keep accounts safe, prevent abuse and fix problems.
• To apply plan limits and, once billing launches, to bill you.
• To answer support requests.
• To meet legal obligations.

We don’t sell or rent your personal information, we don’t use it for advertising, and we don’t use your content to train AI models.

[If you serve people in the EU/UK: confirm legal bases with counsel. Suggested: performing our contract with you, legitimate interests (security, improving the Service), consent (notifications), legal obligation.]

Emails

We send email from support@shifthands.com through AgentMail: a welcome email, password reset and sign-in codes, security alerts such as a new Mac connecting to your account or an AI account being signed out (you can turn the sign-out alerts off), and the waitlist email if you asked for it. Our emails have no tracking pixels and no open or click tracking.

Notifications

If you turn on notifications, we send short, template-only messages such as “Your agent replied” or “needs your OK”, with at most the agent’s or automation’s name. They never contain your chat content, and you can hide even the names on your lock screen.

Your AI providers and optional tools

ShiftHands doesn’t provide the AI. Your agents use AI accounts you connect yourself: Claude (through Claude Code), ChatGPT/Codex, or API keys for providers such as OpenRouter, OpenAI and DeepSeek. Your Mac sends your prompts and the files your agents work with straight to that provider, under your account. Each provider handles that data under its own terms and privacy policy, which you agreed to with them. We aren’t responsible for how they handle it.

Some tools are optional and only run if you turn them on:

• Jev (by TypeSafe, typesafe.ai). If you add a Jev key, your agents can ask Jev short decision questions. Your Mac sends the question plus a small, redacted piece of context (capped at 4 KB per question), never whole chats, files or secrets, directly to TypeSafe under your own Jev account.
• Ego Lite. A separate third-party browser app your agents can use for browser work. It runs on your Mac under its own terms; its sign-ins stay on your Mac.
• Websites and services your agents use. When an agent visits a site or acts in an account on your behalf, that site receives what the agent sends it, under that site’s own terms.

Service providers

We use a small number of companies to run ShiftHands. They process data only on our instructions, to provide their service to us:

• Cloudflare: hosting of our website and app, our database (Cloudflare D1), the relay, app downloads and updates (download.shifthands.com), security, and [confirm] cookieless site analytics.
• AgentMail: sending our emails.
• Web push services run by your browser’s maker (Apple, Google, Mozilla and others): delivering notifications to your devices, if you turn them on.
• Apple: the macOS Keychain on your own Mac stores your API keys; Apple’s push service delivers notifications to Safari and iPhone.
• [Payment processor, e.g. Stripe]: payments, once paid billing launches.

We may also share information if the law requires it, to protect people or the Service from harm or fraud, or as part of a merger, acquisition or sale of assets (in which case this policy keeps applying to your data, or we’ll tell you first).

Cloudflare runs a global network, so your data may be processed in countries other than yours, including the United States. [Confirm transfer safeguards with counsel if you serve the EU/UK.]

Cookies and local storage

• One sign-in cookie (__Host-sh_session): keeps you signed in for up to 30 days. It is marked HttpOnly and Secure so page scripts can’t read it.
• Browser storage: a signed-in hint for our homepage, your drafts, theme and recent chats, so the app opens fast. It stays in your browser.
• No advertising or cross-site tracking: no Google or Meta pixels. [Confirm] Cloudflare Web Analytics counts page views without cookies.

Clearing your browser’s data removes these. You’ll need to sign in again.

How long we keep it

• Account and workspace data: for as long as your account exists.
• Sessions: up to 30 days, or until you sign out.
• Queued messages: until your Mac picks them up or you cancel them.
• Reset and sign-in codes: minutes to hours, then they expire.
• Rate-limit counters: minutes to hours.
• Waitlist emails: until we send the email you asked for, or until you ask us to remove you. [Confirm]
• After you delete your account: it is removed from our live database right away. Copies in database backups are overwritten within [30] days. We may keep a minimal record where the law requires it (for example billing records, once billing exists).

Your choices and rights

• Download your data: Settings → Privacy & data → Download your data gives you a JSON file with your account, sessions, connections and workspace (projects, agents, automations, queued messages and preferences).
• Delete your account: Settings → Profile → Delete account (also linked from Privacy & data). This removes your account and workspace from our servers. Data on your Mac is yours to delete: remove the ShiftHands app and its data from that Mac.
• Correct your details: change your name and password in Settings → Profile, or email us to fix anything else.
• Emails and notifications: turn optional alerts and notifications off in Settings. We still send essential emails like password resets.
• Disconnect an AI account or tool any time in Settings.

Depending on where you live (for example the EU, UK or California), you may have more rights, such as to access, correct, delete or move your data, to object to or restrict some processing, and to complain to your local data protection authority. Email support@shifthands.com and we’ll respond within [30] days. We don’t sell or “share” personal information for cross-context advertising as those terms are used in California law.

Security

We use HTTPS everywhere, hash passwords and session tokens, encrypt two-step verification secrets, support passkeys and two-step verification, and pair each Mac to your account with its own key. Your AI keys never reach our servers. No system is perfectly secure, so please use a strong password, turn on two-step verification and keep your Mac locked. If we learn of a breach that affects you, we’ll tell you as the law requires.

Children

ShiftHands is not for anyone under [Minimum age, e.g. 18], and we don’t knowingly collect data from children. If you think a child has given us personal information, email us and we’ll delete it.

Changes to this policy

We’ll post any changes on this page and update the date at the top. If a change is significant, we’ll also tell you by email or in the app before it takes effect.

Contact

Email support@shifthands.com, or write to [Company legal name], [Address].