Legal
Privacy Policy
This policy explains what SHIFTai collects, why, who it goes to, how long we keep it, and what you can tell us to do with it. It covers shiftai.club, suite.shiftai.club, the AI Studios, the member back office, and everything connected to them.
SHIFTai is a trade name of SHIFT Capital, LLC, 5830 E. 2nd St., Ste. 7000, Casper, WY 82609. We are the controller of the information described here.
1. What we collect
Information you give us
- Account details — name, email, phone, password, country, and the display name shown to other members.
- Payment details — billing address and payment method. Card numbers are handled by our payment processor and never stored on our systems. Where you pay in stablecoin, we store the wallet address that paid, because we can only refund to that wallet.
- Tax and payout details — legal name, address, taxpayer identification number, and bank or wallet details, collected when you earn and required for tax reporting.
- Content you upload or generate — prompts, scripts, images, photographs, audio, video, and everything stored in your Vault.
- Application materials — for Enterprise and top-Club applications, the information in your application and interview, and your reported AI consumption.
- Support correspondence — what you write to us and what we write back.
Information we collect automatically
- Usage data — Studios used, credits consumed, generations run, features touched, session times.
- Device and connection data — IP address, browser, operating system, device identifiers, approximate location derived from IP.
- Attribution data — see section 4.
- Cookies and similar technologies — see section 9.
Information from others
- Payment and fraud signals from our payment processor.
- Consumer or business credit reports, where you apply for an Enterprise or top-Club account and consent to a check. If we decline your application based in whole or in part on a consumer report, we will tell you and identify the agency that supplied it, as the Fair Credit Reporting Act requires.
- Referral data — where another member referred you, we record that they did.
2. Biometric information
Read this section even if you skip the rest. Voice Studio creates voice clones from recordings you supply. Avatar Studio animates photographs of faces. Both can involve biometric identifiers, which are regulated differently from ordinary personal data and, in several states, more strictly than anything else we hold.
We ask first, separately, in writing. Before we collect or generate a voiceprint or a facial template, we tell you what we are collecting, the specific purpose, and how long we will keep it, and we obtain your written consent. That consent is separate from this policy and from our Terms of Service. You can decline, and declining costs you nothing but the use of that specific Studio feature.
What we collect. Voice recordings you upload and the voice model derived from them. Photographs of faces you upload and the facial geometry data derived from them for animation.
What we use it for. Producing the output you asked for, and nothing else. We do not use biometric data to identify you, to verify your identity, to build profiles, to target advertising, or to train general-purpose models.
We never sell it. SHIFTai does not sell, lease, trade, or otherwise profit from your biometric identifiers or biometric information. This is a flat prohibition and it applies to every SHIFTai entity and every partner.
Retention and destruction. We destroy biometric identifiers and the models derived from them when the purpose for collecting them is satisfied, or within one year of your last interaction with us, whichever comes first. If you close your account or withdraw consent, we destroy them within 30 days, and we do not retain a copy. Destruction means deletion from live systems and from backups on the backup cycle then running.
Uploading someone else's face or voice. You may only upload a recording or photograph of another person if you have that person's written permission, and where the law requires it, their written consent to biometric processing. You are responsible for obtaining it. We will remove material on request from a person depicted in it.
Disclosure. We disclose biometric data only to the processors strictly necessary to produce your output, listed in section 7, and only under contract terms that prohibit them from retaining, selling, or repurposing it. We otherwise disclose it only with your consent or where a warrant or subpoena compels us.
If you live in Illinois, Texas, Washington, or another state with a biometric statute, the protections in this section apply to you as a matter of our policy regardless of where you live, and the rights those statutes give you are in addition to them.
3. The AI Studios: prompts, outputs, and model providers
The Studios run on AI models operated by third parties, including Anthropic, OpenAI, HeyGen, and ElevenLabs. To produce what you ask for, we send your prompt and any material you supply to the relevant provider. What we send is limited to what the generation requires. We do not send your name, email, payment details, or earnings data.
We do not train models on your content. We do not use your prompts, uploads, or generated output to train our own models, and we contract with our providers on terms that exclude your content from training theirs. If we ever want to, we will ask you first and it will be opt-in.
Your Vault content belongs to you. We access it to operate and support the service, to respond to a report of illegal content, and where the law compels us.
4. EcoPay attribution
EcoPay pays members for the sales they actually generate, which means we have to know which activity led to which sale. Content produced on the platform carries an embedded attribution tag. When that content leads someone to buy credits, the tag tells us which member's content did it.
Attribution records the link between a piece of content, a referral, and a purchase. We use it to calculate earnings, to display your own performance to you, and to detect manipulation. We do not use attribution data to build advertising profiles, and we do not sell it.
If you buy through a member's content or referral link, that member learns that a sale occurred and is credited for it. They do not receive your name, contact details, or purchase history from us.
5. What we publish
SHIFTai publishes platform revenue and earnings distributions in real time, and runs competitions with public leaderboards. That means some information about members is visible to other members and, in places, to the public.
| What | Who sees it |
|---|---|
| Your display name and Club standing | Other members, and anyone viewing a public leaderboard you appear on |
| Competition rankings and results | Other members and the public |
| Aggregate revenue and earnings distributions | Public. Individual amounts are not attributed to named members unless you appear on a leaderboard that shows them |
| Your legal name, email, address, payment details, tax details, individual earnings | Never published |
You choose your display name and can change it. If you would rather not appear on public leaderboards, tell us and we will withhold you from them.
6. Why we use your information
- To run your account, deliver credits, and operate the Studios.
- To produce the output you request, including through the providers in section 7.
- To calculate and pay earnings, and to track Club volume and standing.
- To take payments, process refunds and buybacks, and prevent fraud and chargeback abuse.
- To assess Enterprise and top-Club applications.
- To meet tax, accounting, anti-money-laundering, and sanctions obligations.
- To support you, and to tell you about changes that affect your account.
- To enforce our Terms, Member Agreement, and Policies and Procedures, including investigating manipulation of attribution or Club volume.
- To improve the service, using usage data in aggregate.
Where the law requires a lawful basis, ours is performance of our contract with you, our legitimate interests in operating and securing the service, compliance with legal obligations, and your consent, which is what we rely on for biometric processing and for marketing email.
7. Who we share it with
| Who | What they get, and why |
|---|---|
| AI model providers — Anthropic, OpenAI, HeyGen, ElevenLabs and others we add | Prompts and supplied material, to produce your output. Under terms that bar training and repurposing |
| Payment processors | Payment details and transaction data, to take payment and issue refunds |
| Cloud hosting and infrastructure | Stored data, to run the platform |
| Analytics and error monitoring | Usage and device data |
| Email and support tooling | Contact details and correspondence |
| Consumer or business reporting agencies | Identifiers, for Enterprise and top-Club checks you consented to |
| Tax authorities and regulators | What the law requires |
| Professional advisers, and a buyer in a merger or sale | What the transaction requires, under confidentiality |
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have never done either.
8. Crypto and wallet information
If you pay in stablecoin, we store the paying wallet address and link it to your account, because refunds can only be returned to the wallet that paid. Blockchain transactions are public and permanent by design. We cannot delete, alter, or reverse anything recorded on a public ledger, including on your request. That is a property of the blockchain, not a choice we make.
9. Cookies and tracking
We use cookies and similar technologies to keep you signed in, remember preferences, secure the service, measure usage, and carry attribution. Attribution cookies record which content or referral brought you to us, so the right member is paid. You can control cookies in your browser, but blocking essential ones will break sign-in.
We honor Global Privacy Control signals.
10. How long we keep it
| Category | Retention |
|---|---|
| Biometric identifiers and derived models | Purpose satisfied or one year from last interaction, whichever is first. 30 days after account closure or withdrawal of consent |
| Account and profile data | Life of the account, then 90 days |
| Vault content | Life of the account, then 90 days to download, then deleted |
| Transaction, earnings, and tax records | Seven years, as tax and accounting law requires |
| Attribution and Club volume records | Life of the account, then seven years in the transaction record |
| Support correspondence | Three years |
| Usage and device logs | 24 months |
11. Security
We encrypt data in transit and at rest, restrict internal access to staff who need it, log access to sensitive systems, and require multi-factor authentication for administrative accounts. No system is perfectly secure, and we will not pretend otherwise. If a breach affects your personal information we will notify you and the relevant authorities as the law requires.
12. Your rights
Wherever you live, you can ask us to:
- Tell you what we hold about you and give you a copy.
- Correct anything inaccurate.
- Delete your data, subject to records we must keep by law.
- Withdraw consent, including consent to biometric processing.
- Stop marketing email, at any time, with one click.
- Withhold you from public leaderboards.
We respond within 45 days and we do not charge for it. We will not deny you service, charge you a different price, or reduce your earnings because you exercised a privacy right.
California residents additionally have the rights to know, delete, correct, opt out of sale or sharing (we do neither), limit use of sensitive personal information, and appeal a refusal. You may use an authorized agent.
Residents of other US states with comprehensive privacy laws have equivalent rights, including appeal rights, which we honor on the same terms.
If you are in the UK or EEA, you also have rights to portability, restriction, and objection, and the right to complain to your supervisory authority. Transfers of your data to the United States are made under Standard Contractual Clauses.
To exercise any of this, email support@shiftai.club. We may need to verify who you are before we act.
13. Children
SHIFTai is for adults. We do not knowingly collect information from anyone under 18. If we learn that we have, we delete it and close the account. If you believe a minor has given us information, email us and we will act.
14. Changes
We will post any change here with a new effective date. If a change materially affects how we handle your information, we will email you before it takes effect. A change that expands how we use biometric data will always require fresh consent, never silent acceptance.
15. Contact
Email support@shiftai.club, or write to SHIFT Capital, LLC, 5830 E. 2nd St., Ste. 7000, Casper, WY 82609.