Legal review
Privacy notice
19 October 2026
This notice is ready for legal review. It describes Shift Computer as it works in the product today. It is not a signed legal opinion.
Shift did not previously publish a privacy policy page. The word Privacy in the site footer was a label, not a document. This page is that document for Shift Computer, together with the account facts needed to understand it. Other Shift tools process the content an employee submits to them. This notice does not try to describe every tool.
Account
An employee signs in through the organization's identity provider. Computer is available only to a signed-in member of an organization that allows the Computer tool.
What Computer accesses
When an employee starts a task, the extension can open the websites named in that task. It reads the page address, title, headings, visible text, field values that are not passwords, and the names of buttons and fields. It can click, type, scroll, and use the keyboard and pointer on those pages. It does not read passwords, cookies, or the browser's stored data. A download runs only after the employee approves that step. Shift can show a preview image of the task tab inside the Computer page on that computer. When a task needs to operate a graphical page, one screenshot of that tab can be sent to the organization's model provider for the next action, then deleted. It is not kept as a separate file.
When information is collected
Information is collected when the employee connects the browser and when a task they started runs. Connecting uses a one-time code and a secret that stays in the extension. Shift stores hashes of the code and the secret, and a hash of the device token. The device token itself stays in this browser until the employee disconnects it, and it is restored when Chrome starts again.
How information is processed and stored
The task wording, the website names, the step status, and the page text needed to finish the task are stored on Shift's backend for that organization. Shift shortens page text and removes some patterns that look like secrets or card numbers before saving it. Page text is not kept only on the employee's computer. It is transmitted to Shift.
AI providers
A task Shift already knows how to perform is not sent to an AI provider. A goal is sent, with the website names, to the model provider configured for the organization so Shift can choose a strategy and recover when the page is unexpected. Jev, when configured, receives the visible text and control names to choose the next grounded action. A graphical page can also send one screenshot for that decision. If Jev is not configured, or a request fails, Shift uses the language model or asks the employee to choose. The page text needed for the task is stored in the task record. The screenshot is not.
How long task information is kept
Computer session records stay until the employee deletes them, or until the organization or Shift removes them. Computer does not expire them on a timer.
Who can see a task
In Computer, only the employee who started the task can open it. Other employees in the same organization cannot. Members who are allowed to read the organization audit log can see that a task started, was approved, was stopped, or that a browser was disconnected. Those events do not include the page text. People who operate Shift can access stored records to run and support the service.
How to disconnect the extension
Choose Disconnect browser on the Computer page, or Disconnect this browser in the extension popup. That revokes the browser's token, and the extension stops receiving tasks. Closing Chrome also forgets the session token. Connecting again replaces the previous token. Site access and the extension itself can be removed in Chrome's extension settings.
How to ask for deletion
On the Computer page, open a session and choose Delete. That removes it from your session list. An organization administrator can also contact Shift from the homepage form.
Browser permissions
The extension requires permission to manage tabs, run its own script in a tab the employee authorized, remember the session token, wake itself, and show a notification. Connecting asks Chrome only for the Shift website, so the extension can receive tasks. Starting a task asks Chrome for the specific websites in that task if they are not already allowed. Download permission is requested only when the employee approves a download. A Shift approval card can appear on the task website. It does not replace Chrome's own permission dialogs, and it does not control the desktop.
Contact
Use the contact form on the Shift homepage for a privacy or deletion request.