DigitalShyft LLC · Last updated 16 August 2026
This policy covers the DigitalShyft client portal at portal.digitalshyft.com and the DigitalShyft iOS and Android apps. It describes what we hold about the people who sign in, why, and who else sees it.
Accounts are created by DigitalShyft for clients we work with. There is no public sign-up.
| Data | Why we hold it |
|---|---|
| Email address and name | Your sign-in identity, and how we address you in notification emails. Supplied by us when your account is created. |
| Password | Stored only as a salted hash. We cannot read it and cannot tell you what it is. |
| Device details | When you sign in on a phone we record the platform, OS version, app version and a device label, plus a push token. This is what powers the signed-in device list and lets you sign a lost phone out. |
| Requests you send us | The text of a request and any photo or file you attach. This is work you are asking us to do, so we keep it with your account. |
| Notification preferences | Which categories you want, on which channel, and your quiet hours. |
| Questions to the AI assistant | If you use “Ask AI”, your question and the dashboard figures needed to answer it are sent to Anthropic. See Who else sees it. |
| Sign-in activity | Timestamps and IP address for sign-ins and token refreshes, kept so that account takeover is detectable. |
| Your marketing analytics | The figures the dashboard exists to show: traffic, search, ads and email performance for the properties you have connected. This is your data about your own business. |
| Service | What reaches them |
|---|---|
| Railway | Hosting. The application and its database run on their infrastructure. |
| Apple (APNs) | Push notifications to iPhones: the notification title and body, and your device token. |
| Google (Firebase Cloud Messaging) | The same, for Android devices. |
| SendGrid | Notification emails: your address and the message. |
| Anthropic | Only if you use “Ask AI”: your question and the relevant dashboard figures. Not used to train their models. |
| Google (Analytics, Search Console, Ads) | Read-only. We pull your figures from accounts you have connected; nothing is sent back. |
Each is used only to run the service. None of them is given your data for their own purposes.
Account data, requests and analytics history are kept for as long as your account is open, because the dashboard is a record over time and deleting last year would defeat it.
A signed-in device stops being usable the moment you sign it out, and its sign-in credential expires within 90 days regardless.
Email david@digitalshyft.com and we will delete your account and the data associated with it. We will confirm when it is done. Accounts are created and removed by DigitalShyft rather than self-serve, because access is by invitation.
If you hold access to more than one client, tell us whether you want all of it removed or only one.
This is a business tool. It is not directed at children and we do not knowingly collect data from anyone under 13.
If this policy changes we will update the date at the top. If a change materially affects what we hold or who sees it, we will tell account holders directly rather than relying on you to re-read this page.
DigitalShyft LLC · david@digitalshyft.com