Privacy Notice

Last updated: May 5, 2026  ·  Effective: pending

This Privacy Notice explains how 3 Twelves Inc (dba Shiftify) collects, uses, and protects personal information when you visit shiftify.us, request a TrueRate quote, request a trial, or contact us. The full notice is being drafted with counsel and will replace this stub at the same URL.

Who we are

3 Twelves Inc, a US company headquartered in Tucson, Arizona. For the purposes of GDPR, 3 Twelves Inc is the data controller for personal information collected through this website.

What we collect

• Contact form data: name, work email, company, role, phone (optional), and free-text notes you provide on the TrueRate quote form, the trial request form, or the newsletter form.
• Technical data: IP address, browser, device type, referring URL, page interactions, collected only with your consent (see Cookies).
• Communication content: emails you send to us at shiftify.us mailboxes.

Why we collect it

• To respond to your inquiry, prepare a quote, or invite you to a trial.
• To improve the site and the platform we are building.
• To meet legal and contractual obligations.

Legal basis (GDPR)

Consent (Art. 6(1)(a)) for analytics and marketing communications. Legitimate interests (Art. 6(1)(f)) for responding to inquiries you send us. Contractual necessity (Art. 6(1)(b)) for delivering services to existing customers.

Retention

Inquiry data is retained for 24 months unless you request earlier deletion or you become a customer (in which case standard contract retention applies). Analytics data is retained for 14 months.

Sharing

We do not sell personal information. We share with sub-processors disclosed on our Trust Center under contract terms that require equivalent protection.

International transfers

If you are located in the EEA, UK, or Switzerland, your data is transferred to the United States under Standard Contractual Clauses or an equivalent legal mechanism.

Your rights

• Access, correction, deletion, portability, restriction, objection (GDPR / UK GDPR).
• Right to know, delete, correct, opt-out of sale or sharing (CCPA / CPRA).
• Right to lodge a complaint with a supervisory authority.

Submit any request to privacy@shiftify.us. We respond within 30 days (45 days under CCPA with notice).

Security

We use TLS in transit, encryption at rest on the underlying platform, role-based access controls, and audit logging. See the Trust Center for current control posture.

Changes

We will post material changes to this notice at this URL with a new "Last updated" date.