LEGAL

Privacy and Cookies Policy

Last update: February 2026

Introduction

Anyshift.io is committed to protecting your privacy. This Privacy Policy explains how Anyshift (“Us”, “We”, “Our”) collects, uses, and discloses your information when you use Our website and platform (“Website”, “Platform”, “Services”) available at:

https://www.anyshift.io/
https://app.anyshift.io/sign-in

About Anyshift

Anyshift Solution is a Platform incorporating an AI Assistant, designed for organizations seeking to enhance the stability and performance of their cloud infrastructures.

Anyshift solution is developed and operated by Anyshift, Inc., a corporation incorporated under the laws of the United States, with its registered office at:

1411 Broadway, Floor 16, New York, NY 10018, United States

For the purposes of applicable data protection laws, Anyshift, Inc. acts as Data Controller as described in this Privacy Policy.

Applicable Laws

This Privacy Policy applies to the data processing operations We perform when We offer goods and services to data subjects in the European Union or monitor behaviors taking place in the European Union.

Definitions

Service(s): the Services provided by Anyshift via the Platform.

Client: the entity that agrees to enter into the Agreement with Anyshift in order to use Our Services.

Data Processing Agreement: contract concluded between the processor and the controller to govern processing operations performed on behalf of the controller.

The following terms are defined according to Article 4 of the EU General Data Protection Regulation (EU) 2016/679:

Personal Data: any information relating to an identified or identifiable natural person.
Data controller: the natural or legal person that determines the purposes and means of processing personal data.
Data processor: the natural or legal person that processes personal data on behalf of the controller.

Scope of this Privacy Policy

This Privacy Policy provides information on how We process your Personal Data when We act as a Data Controller.

It does not concern processing operations We perform as a Data Processor, which are governed by Our Data Processing Agreement.

This Privacy Policy also includes a section on tracking technologies (“Cookies”).

Role of Anyshift in the Processing of Personal Data

Anyshift as a Data Processor

In most cases, We process Personal Data on behalf of Our Clients who act as data controllers. When acting as a processor, We process Personal Data only upon documented instructions from Our Clients, in accordance with Our Data Processing Agreement.

Anyshift as a Data Controller

When We determine the purposes and means of processing Personal Data (e.g., improving Our Services), We act as a Data Controller.

Personal Data We Collect and How We Process It

Source of Data

We collect:

Personal Data transmitted by Our Clients
Personal Data you generate or provide when using Our Services

Most data is limited to technical and usage data. We do not intentionally collect special categories of Personal Data.

If you wish to obtain information about Our legitimate interest balancing test, you may contact Us using the details below.

Data Retention

We do not retain Personal Data longer than necessary for the purpose for which it was collected.

Processing Activities

Manage Client relationship
- Categories of Data: Identity information; professional information
- Legal Basis: Legitimate interest; contract performance
- Retention: Duration of contractual relationship
Accounting & billing
- Categories of Data: Identity information; billing information
- Legal Basis: Legitimate interest
- Retention: Duration required by law
User account management
- Categories of Data: Identity information; usage data
- Legal Basis: Contract performance; legitimate interest; consent
- Retention: Duration of relationship; deleted within 30 days after termination
Platform security & maintenance
- Categories of Data: Usage data; device data
- Legal Basis: Legitimate interest
- Retention: 12 months (unless legal/security need requires longer)
Service improvement
- Categories of Data: Usage data; device data
- Legal Basis: Legitimate interest
- Retention: 24 months
Managing requests
- Categories of Data: Identity information; request data
- Legal Basis: Legitimate interest
- Retention: Duration necessary to handle request
Marketing operations
- Categories of Data: Identity & professional information
- Legal Basis: Legitimate interest
- Retention: 3 years after last interaction or until objection
Analytics & marketing measurement (LinkedIn Insight Tag & Google Analytics)
- Categories of Data: Usage data; device data; tracking identifiers
- Legal Basis: Consent where required; legitimate interest where permitted
- Retention: 14 months

Who We Share Your Information With

We may share Personal Data:

With your consent
With trusted service providers under a Data Processing Agreement
With social media platforms via tracking technologies
When required by law

Data Transfers

Data transfers. As Anyshift, Inc. is established in the United States, Personal Data may be transferred to and processed in the United States. Where Personal Data is transferred from the European Economic Area (EEA) or the United Kingdom to the United States or other third countries, Anyshift relies on appropriate safeguards in accordance with Articles 45 and 46 of the GDPR, including adequacy decisions (such as the EU-U.S. Data Privacy Framework where applicable) and Standard Contractual Clauses adopted by the European Commission.

Your Rights

You have the right to:

Access your Personal Data
Rectify inaccurate data
Erase your data in certain circumstances
Restrict processing
Object to processing
Data portability
Withdraw consent
Not be subject to automated decision-making

You also have the right to lodge a complaint with a competent supervisory authority.

To exercise your rights, contact:

privacy@anyshift.io
or
1411 Broadway, Floor 16, New York, NY 10018, United States

Data Security

We implement appropriate technical and organizational measures to protect Personal Data against unauthorized access, disclosure, alteration, and destruction, including access controls, encryption where appropriate, and secure hosting environments.