SHIFT AI — PRIVACY POLICY
Effective May 31, 2026
1. WHO WE ARE
SHIFT AI is operated by SHIFT Capital LLC (hereafter "SHIFT," "we," "us"). We respect your privacy and aim to be transparent about the data we collect, why we collect it, and your rights regarding that data.
This policy covers the SHIFT AI Suite (suite.shiftai.club), the SHIFT marketing site (shiftai.club), and the SHIFT API (api.shiftai.club).
2. WHAT WE COLLECT
Account data: legal name, email address, password hash (we never store your raw password), invite slug, account tier, referral code, profile picture URL.
Content data: prompts you submit to the Studio, images and text and audio you generate, files you upload (source images, voice samples, brand logos), character library entries, chat history, vault metadata (tags, titles, captions).
Attribution data: cookies (.shiftai.club domain, 90-day TTL) carrying referral codes you have clicked through; click events on share URLs; vault asset short codes; embedded steganographic attribution tags within generated PNGs, MP3s, and text files.
Payout data: Stripe Connect Express account ID, payout enablement status, last-four digits of bank account / verification status. Stripe holds the underlying full bank account and identity verification data — we do not.
Usage data: credit deductions, generation timestamps and latency, anonymized provider token counts for pricing audits, login timestamps and IP addresses.
Transaction data: purchase amount, currency, payment method type (card / ACH / Link), transaction status, attribution context. Full card numbers are processed and stored only by Stripe.
Geolocation data: approximate country and region (state or province) derived from your IP address at signup. We do not store raw IP addresses long-term or precise lat/long coordinates. Used solely for internal analytics about where the SHIFT membership is geographically distributed.
3. HOW WE USE IT
Operate the Studio: send your prompts and uploads to our AI partners (OpenAI, Anthropic, Replicate, others as integrated) and return the generated content to you.
Route attribution: identify which member referred a sale and which sharer drove a click, so EcoPay commissions are paid to the correct recipient.
Calculate and distribute commissions through the EcoPay system, including ConnectPay direct referrals, ContentPay content attribution, and weekly performance pool bonuses.
Process payments via Stripe and pay you via Stripe Connect Express.
Send transactional emails: purchase confirmations, password resets, welcome and onboarding emails, payout confirmations, tier promotions, broadcast notices.
Improve the product: aggregate analytics (no personal identifiers), pricing audits, error debugging.
Comply with law: tax reporting (1099-K via Stripe), fraud investigation, response to legal process.
4. THIRD PARTIES WE SHARE DATA WITH
AI providers — OpenAI, Anthropic, Replicate, and other model providers as integrated. Your prompts and uploaded content are sent to these providers solely for generation. They do not receive your account email, payout data, or commission history.
Stripe — our payment processor. Stripe handles credit purchases (Payment Element on shiftai.club/pages/founder-checkout, Suite credit-pack purchases) and commission payouts (Stripe Connect Express). Stripe holds your card number and bank account details — we never see those directly.
SendGrid — email delivery for transactional notifications.
Shopify — hosts our marketing site at shiftai.club. Shopify does NOT process checkout (Stripe Elements handles that directly). Shopify receives anonymous browsing data on the marketing pages.
Hosting providers — Vercel (admin console) and a dedicated VPS (Suite + API + database). Servers store logs and generated files.
Legal compliance — we may disclose data in response to valid legal process (subpoena, court order, government request).
We do NOT sell your personal data to advertisers, data brokers, or any third party. We do not use third-party advertising trackers on our properties.
5. COOKIES AND TRACKING
Session cookie (suite.shiftai.club domain, httpOnly, Secure) — keeps you signed in to the Suite. Expires when you log out or after 30 days of inactivity.
Attribution cookies (.shiftai.club domain, 90-day TTL) — shift_ref and shift_content carry the referral code and content tag from the link you clicked, so EcoPay commissions route correctly when you eventually purchase credits.
Local storage — caches share-click history (for the Today checklist), last-seen notification timestamp, and other UX state.
We do not use third-party advertising trackers, no Facebook Pixel, no Google Ads remarketing.
You can clear cookies and local storage at any time through your browser settings. Doing so will sign you out and clear attribution context.
6. YOUR RIGHTS
Access — email privacy@shiftai.club to receive a copy of all account, content, transaction, and attribution data we hold on you. We respond within 30 days.
Correction — edit profile fields directly in Suite Settings, or email us for data we hold that you cannot self-serve.
Deletion — email privacy@shiftai.club to delete your account. We delete account data within 14 business days. Generated assets that have been publicly shared or distributed may persist in third-party caches; we cannot purge those.
Portability — your data is provided in a machine-readable format (JSON) on access request.
Opt-out — you may opt out of non-essential emails (broadcasts, marketing) at any time via the unsubscribe link in any such email. Transactional emails (purchase confirmations, password resets, payout notices) cannot be opted out of while you maintain an active account.
California residents (CCPA / CPRA): you have the right to know what personal information we collect, the right to delete, the right to correct, and the right to opt out of any "sale" of personal information. SHIFT does NOT sell personal information. Email privacy@shiftai.club to exercise any of these rights.
European Economic Area and UK residents (GDPR): you have the rights described above plus the right to restrict processing, object to processing, lodge a complaint with your supervisory authority, and the right not to be subject to automated decision-making with legal effects.
7. RETENTION
Account and content data: retained while your account is active, plus 30 days after deletion to handle disputes and reversal requests.
Transaction records and payout history: retained for 7 years to comply with tax reporting obligations.
Server logs: retained 90 days on a rolling basis.
Attribution event records: retained as long as the related transaction is retained.
8. SECURITY
We use industry-standard security controls: HTTPS for all traffic, hashed passwords (bcrypt), encrypted database connections, scoped admin access controls, daily backups, webhook signature verification on all payment events.
No system is perfectly secure. If we discover a breach affecting your data, we will notify affected members within 72 hours of confirming the breach, in accordance with applicable law.
We recommend you use a strong, unique password for your SHIFT account and enable two-factor authentication on the email address associated with your account.
9. CHILDREN
SHIFT AI is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If we learn we have collected data from a minor, we will delete it. Parents or guardians who believe their child has provided information may contact privacy@shiftai.club to request deletion.
10. INTERNATIONAL TRANSFERS
Our servers are located in the United States. If you access SHIFT AI from outside the US, your data will be transferred to and processed in the US. By using SHIFT AI, you consent to this transfer. We rely on Standard Contractual Clauses or equivalent safeguards for transfers from the European Economic Area or UK.
11. CHANGES TO THIS POLICY
We may update this policy from time to time. Material changes will be posted on this page with an updated effective date and notified to active members by email at least 14 days before they take effect. Continued use of SHIFT AI after the effective date constitutes acceptance of the revised policy.
12. CONTACT
Privacy and data requests: privacy@shiftai.club
General support: support@shiftai.club
Operator: SHIFT Capital LLC
Your turn is locked. Check your inbox in the next 60 seconds for your founding-member credentials and onboarding call link.
Welcome to The Decentralized Economy.