Last Updated: September 12, 2026
We retain your account data for as long as your account is active or as needed to provide you services.
Immediate Deactivation
When your account is deleted at your request, it is deactivated and you can no longer log in.
Your personal information (email, name, password) is immediately anonymized. Some data is retained for legal and operational requirements as described below.
The following data is retained to comply with legal obligations and operational requirements:
Retention: Retained as required by federal labor law (FLSA)
Clock-in/clock-out records are kept for payroll and compliance purposes, but are anonymized (no longer linked to your personal information) after account deletion.
Retention: Retained indefinitely for accounting, tax compliance, and dispute resolution
Retention: Retained indefinitely for security monitoring, fraud prevention, and legal compliance
Audit logs record security events, authentication attempts, data access, and system changes. These logs cannot be deleted even after account deletion to maintain security integrity and comply with legal obligations.
What a visitor builds with the free schedule generator on our public website (the people, shifts, rules, and draft schedule) is stored in a temporary workspace that is not linked to an email address or account. An automated job deletes workspaces that are more than 7 days old and have not been moved into a subscribed account. The timing of deletion depends on when the job runs. A workspace moved into a subscribed account becomes that account's data and is retained as described in section 1.
Under GDPR and CCPA, you can access, export, correct, or request deletion of your data by emailing contact@xshift.ai. Contact us at contact@xshift.ai