COOKIES POLICY

1. Introduction

This Cookies Policy explains how SHIFTED UNIVERSE (PTY) LTD (registration number 2024/582839/07) (“ShyftOS”, “we”, “us”, “our”) uses cookies and similar technologies when you access or use the ShyftOS platform, including websites, applications, interfaces, APIs, features, and related services (the “Services”).

This Policy must be read together with our Privacy Notice and Terms and Conditions.

2. What are cookies

Cookies are small text files stored on your device when you use a website or application. Similar technologies include browser local storage, session storage, and other device identifiers used to operate the Services.

For purposes of this Policy, “cookies” includes browser cookies and comparable storage mechanisms used within the ShyftOS application.

3. Categories of cookies we use

3.1 Strictly Necessary Cookies

These cookies are required for the operation and security of the Services and cannot be disabled through our systems.

• authenticate users
• maintain secure sessions
• prevent fraud and abuse
• enforce Workspace isolation
• preserve security controls
• maintain essential application state

Legal basis: contractual necessity and legitimate interests under POPIA. Retention: session-based or up to 30 days depending on authentication lifecycle.

3.2 Functional Cookies

These cookies enable application preferences and enhanced functionality: interface preferences, layout customisation, theme settings, language or regional settings.

Legal basis: legitimate interests or consent where required. Retention: up to 12 months or until cleared by the user.

3.3 Analytics Cookies (Optional – Opt-In Only)

Analytics cookies are used only where you provide consent through the cookie preference controls. They are used to measure product usage, analyse performance and reliability, and improve features and workflows.

We do not intentionally collect task or ticket body text, chat message content, or file uploads through analytics cookies. Analytics data may include device type, browser type, IP address (anonymised where supported), interaction events, session duration, and performance metrics.

Third-party provider: Google Analytics (Google LLC). Legal basis: consent. Retention: in accordance with Google Analytics configuration.

4. Third-Party Services

We use trusted service providers including Firebase and Google Cloud Platform (hosting and authentication), Google Analytics (analytics, where enabled), Google Gemini / Vertex AI (AI processing features). These providers may process technical identifiers necessary to provide their services.

6. Managing cookies

When you first access the Services, you are provided with cookie preference controls allowing you to accept or reject optional analytics cookies. Strictly necessary cookies cannot be disabled because they are required for the Services to function.

You may change your cookie preferences at any time within the application where cookie controls are provided. You may also manage cookies through your browser settings, including deleting stored cookies or blocking future cookies. Disabling strictly necessary cookies may prevent access to parts of the Services.

7. Data subject rights

Your rights regarding Personal Information processed through cookies are described in our Privacy Notice. You may request access, correction, deletion, objection to processing, or withdrawal of consent by contacting support@shifteduniverse.com.