Privacy Policy
Datenschutzerklärung — structural outline pending legal drafting.
- Controller and contact
[Content to be provided by the operator with legal counsel.]
- What data is processed, and why
[Content to be provided by the operator with legal counsel.]
- Legal bases (Art. 6, Art. 9 GDPR)
[Content to be provided by the operator with legal counsel.]
- AI processing and user-provided API keys
[Content to be provided by the operator with legal counsel.]
- YouTube API Services, and Google's privacy policy
[Content to be provided by the operator with legal counsel.]
- Storage duration, deletion and erasure
[Content to be provided by the operator with legal counsel.]
- Recipients and processors (hosting, database)
[Content to be provided by the operator with legal counsel.]
- Your rights (access, rectification, erasure, portability, objection)
[Content to be provided by the operator with legal counsel.]
- Supervisory authority
[Content to be provided by the operator with legal counsel.]
Payments and SHIFT credits
Draft pending legal review.
- Paddle. Paddle.com is the merchant of record for credit purchases. You enter your payment details, email and country in Paddle's checkout, directly with Paddle, which processes them under its own privacy policy as the seller. SHIFT never receives card details: it learns the transaction ID, the amounts and whether the payment completed or was refunded. No SHIFT account ID, username or email is sent to Paddle.
- OpenRouter. When credits pay for archiving, claim checks or image analysis, those requests run on SHIFT's OpenRouter account under the same controls as an OpenRouter key of your own: no provider may collect or train on your content, and images go only to zero-retention endpoints.
- OpenAI. When credits pay for your companion — its conversations, the SoulProfile context you allow it, and content discovery — or for dictation, those requests go directly to OpenAI on SHIFT's own account, never through OpenRouter. OpenAI does not train on API content. Your companion uses credits only after you have confirmed this in Wallet.
- What SHIFT keeps. Your balance and a ledger of amounts: each top-up, refund and request, with the kind of work and the model used — never what was said or shown. The ledger is deleted with your account, after unused credits have been paid back.
Prices, refunds and validity: credits terms.
This page is a structural placeholder. Its content must be completed by the site operator before public launch. For a plain-English explanation of how your data is actually protected today — and our roadmap to making your private context unreadable even by us — see Trust & Privacy Architecture.