Privacy Policy
Effective Date: July 24, 2026. This policy details how ShiftGuard manages, stores, and safeguards your personal and organizational information.
1. Introduction & Scope
ShiftGuard ("we", "us", or "our") is a cloud-based environmental monitoring and compliance logging service operated under the brand subdomain of Ferrowright Engineering.
This Privacy Policy applies to the ShiftGuard website (shiftguard.ferrowright.com) and the associated software application. It describes our commitments regarding the collection, processing, and storage of your personal information, including Google User Data accessed via OAuth authentication.
2. Information We Collect
Google Account & Authentication Data (Google OAuth)
When you sign up or log in using your Google account via OAuth, we collect and store:
- Your full name and profile name
- Your verified email address
- Your profile picture URL (for in-app display)
- Your Google account unique identifier (UID)
Note: ShiftGuard only requests the basic profile and email scopes. We do not access, write, or request access to any other Google services, calendars, drives, or sensitive data.
Organization & Site Configuration Data
To provide our monitoring service, users configure:
- Company/Organization name and billing references
- Job site names, addresses, and physical coordinates (latitude/longitude)
- Crew lead contact info: names, phone numbers, and email addresses for dispatching alerts
Support & Form Data
When you request customer care or support, we collect the name, email, subject, and message content you provide to resolve your inquiry.
3. How We Use and Process Information
We use the collected data strictly to operate ShiftGuard and deliver compliance logging:
- Account Management: Authentication via Google OAuth identifies you and associates your account with your organization.
- Environmental Monitoring: Physical coordinates are cached to query the National Weather Service (NWS) and EPA AirNow APIs. No personal info is sent to these endpoints.
- Alert Notification: Crew lead contact details are utilized solely to send real-time warnings (via email) when safety thresholds are breached.
- Compliance Ledger Exports: Logged readings are aggregated and formatted into PDFs or CSVs for your company's records.
4. Data Storage and Security
Your data is stored securely in the Google Firebase Firestore database and Firebase Auth system in the United States.
We implement robust security rule architectures that enforce multi-tenant isolation. No user or organization can access, view, modify, or delete database documents belonging to another organization.
5. Sharing, Disclosure, and Third Parties
We do not sell, rent, lease, or share your personal information or Google account data with any third-party marketing, analytics, or advertising platforms.
We disclose details only to the following essential service subprocessors to run the app:
- Firebase / Google Cloud: Main database hosting, authentication provider, and scheduled monitoring functions.
- Paddle: Our merchant of record for processing subscriptions (Starter and Growth plans). Your billing information is processed directly by Paddle.
- Resend: Secure transactional email dispatch for sending site alerts to your designated crew leads.
6. User Choices, Data Control, and Deletion
You retain complete control over your account. You can:
- Update your company settings, users, and job sites directly in the dashboard.
- Cancel subscriptions via the Paddle Customer Portal link in the billing settings.
- Request absolute deletion of your account and all associated job site logs by emailing shiftguard-contact@ferrowright.com. Upon verification, all records are permanently deleted from Firestore.
7. Contact Information
For questions regarding this Privacy Policy, your Google OAuth data protection, or general compliance logging, please contact us at:
Ferrowright Engineering — ShiftGuard Support
Email: shiftguard-contact@ferrowright.com
Website: shiftguard.ferrowright.com