Privacy policy
Updated: March 5, 2026
Data controller
The data controller is SD Consult, SAS, 9 Traverse de l'Harmonie, 13016 Marseille, France. DPO: Abdelhadey โ contact@sanishift.com.
Data collected
SaniShift collects account data (name, professional email, role), staff scheduling data (shifts, on-call assignments, availability, constraints, preferences, swaps), team data (members, skills or roles), connection data (IP address, logs), billing-related data processed by Stripe, and anonymized usage data. Do not enter patient names, diagnoses, charts, visit details or clinical notes.
Purposes and legal basis
Data is processed for: contract performance (schedule generation, account management, notifications), legitimate interest (service improvement, anonymized usage statistics, customer support), and consent (PostHog usage measurement cookies, marketing communications).
Subprocessors
SaniShift uses specialized subprocessors for hosting, database, payments, product analytics and transactional email, including Railway, Supabase/PostgreSQL, Stripe, PostHog and Resend. Stripe handles card payments; SaniShift does not store full card details.
Data retention
Account and scheduling data is retained during the contract plus 30 days after termination unless an earlier deletion request is processed. Billing data is retained as required for accounting obligations. Usage analytics and connection logs are retained only for limited operational, security and product-improvement purposes.
Your rights
Because SaniShift is published by a French company and hosted with an EU data posture, GDPR-grade rights apply where relevant: access, correction, deletion, restriction, portability and objection. To exercise your rights: contact@sanishift.com or mail SD Consult โ DPO, 9 Traverse de l'Harmonie, 13016 Marseille, France.
Mandatory nature of data
Providing account data (name, professional email) is required for contract performance. Without this data, access to the service is not possible. Scheduling data is required for the scheduling service to function. Usage data (PostHog) is optional and subject to your consent.
Automated decision-making
SaniShift uses automated scheduling logic based on constraints and fairness criteria. The result is decision support: the schedule maker keeps control and may modify, approve or reject generated proposals. Customers remain responsible for final schedule validation and local policy compliance.
Cookies
SaniShift uses strictly necessary cookies (authentication, language preference) that do not require consent, and usage measurement cookies (PostHog) subject to your consent. You can manage your preferences at any time via the cookie banner or your browser settings.
Transfers outside the EU
SaniShift is designed with EU hosting for application data. Some subprocessors, such as payment or email providers, may involve transfers or processing outside the EU. Where required, these transfers are governed by appropriate contractual or legal safeguards.