Privacy
Last changed 22 September 2026
This is a working draft. It has not been reviewed by a lawyer, and it will change before ShiftPort is offered publicly.
The short version
ShiftPort holds the record of a working day on a construction site: who was there, what they did, how long it took, and what went wrong. A contractor uses it to make the paperwork they already have to make.
We do not track anybody’s location, we do not run analytics, and we do not sell or share anything with advertisers. The data belongs to the contractor who captured it, not to us.
What is held
- About people who sign in — name, initials, trade, union local number and email address. The email is how you sign in; there are no passwords.
- About crew who do not sign in — name, trade, local number, whether they were on site, their hours, and a signature drawn on a foreman’s screen.
- About the work — tasks, quantities, safety talks, delays, deliveries, requests for information, incidents, equipment checks, deficiencies, site walks, notes and photographs.
- About the job — its number, site, shift times, and the place name the office chose for the weather.
What is not held
- No location tracking. The app never asks your device where it is. The only coordinates stored belong to the job, set by the office so the weather can be looked up for the site.
- No analytics, no session recording, no advertising. There is no tracking code in the app at all.
- No passwords. Signing in is a six-digit code sent to your email.
Crew who never signed up
Most of the people named in ShiftPort never opened it. A foreman marks who was on site and hands the phone across for a signature. That is how the paper version works and it is how this works.
It also means the contractor — not ShiftPort — is the one who has to have told their crew that this record is being kept, and is the one to ask about correcting or removing it. We hold it on their behalf.
Who can see it
Two boundaries decide everything: the company you belong to, and the jobs you are on. A contractor cannot see another contractor’s work. Somebody on one job cannot see another job. A union representative linked to a job sees their own members’ attendance and hours on it and nothing else of the contractor’s commercial record.
These are enforced by the database itself rather than by the screens, and they are checked by an automated suite that signs in as each kind of person and tries.
On the phone
The app works with no signal, so a copy of the current period’s work is kept on the device and sent when there is a connection. Signing out and clearing this site’s data in the browser removes it.
Who else touches it
- Supabase — the database, file storage and sign-in codes.
- Vercel — hosting.
- Resend — sending the sign-in code and anything the app emails.
- Open-Meteo — the weather. It is sent a place name or the job’s coordinates, and nothing about any person.
How long it is kept
For as long as the contractor keeps their account, because a daily report is a record somebody may need years later — for an invoice, a claim, or a safety investigation. When a contractor leaves, their data is deleted on request.
Asking about your own record
If you sign in, you can see your own details in the app. If you are crew and do not sign in, ask your employer — they hold the record and can correct it. If you cannot get an answer that way, write to us and we will help.
Changes
If this changes in a way that matters, the date at the top changes and account holders are told.