This is the initial privacy policy for Shuffle cloud. Valid as of this file's last change date on Github
We are Shuffle AS (and Shuffle LLC, the subsidiary), and this privacy policy will tell you how we use and protect your personal data.
We understand the importance of the data we collect on our customers, and the sensitivity of what our customers may want to use our platform for. The following explanations go into more detail on how your data is being processed and stored.
Shuffle utilizes Google Cloud Platform's Datastore and Google Cloud Storage. We encrypt all your data by default, and have extra mechanisms for API-keys and secrets inserted. All our code for encryption can be accessed here.
Utilizing Google Cloud Platform and internal audit logs, we track all sessions and changes in Google Cloud's Cloud Logging.
Shuffle has added SSO and Two-factor authentication to any user for free, protecting from fraudulent access of your Shuffle account. Read more here on SSO and MFA.
We do not permit our team direct access your organization or data within the Shuffle platform without your explicit consent. During support investigations, we may utilize internal tools to simulate your user, but will never directly get information about you or your organization from our data storage solutions. To learn more about organizations, click here.
We store your data for 3 years by default, to be used in an anonymous and sanitized way, to create algorithms for better workflow autocompletion.
Shuffle does not share data with any 3rd parties, except our support partner Infopercept. We do however have third party services where your data may be stored - all listed in the segmented details below.
Shuffle's use and transfer to and from any app in our ecosystem will adhere to the respective platform's user data policy, including their Limited Use requirements. If a breach of policy is discovered, please contact us at support@shuffler.io to get the integration fixed or removed.
All use of Google's API's within the Shuffle ecosystem adheres to the Google API Services User Data Policy, including Limited use requirements. All client credentials that give access to or distribute data to and from Google API's are saved in a secure way and kept strictly confidential.
As of Q1 2023, we have added multiple datacenter locations around the world on the Google Cloud Platform infrastructure. Google's europe-west2 location (London) is our default region for everyone, but we move customers to the closest region for them. The following regions are available:
We may add more regions in the future. If you would like to retain your data in another region than the default one (even if the region doesn't exist), contact the Shuffle support team.
We use the third party payment processor Stripe. We do not retain any of the information provided to them during a transaction.
Data Controller: Shuffle AS and Shuffle LLC
Contact info: privacy@shuffler.io