Privacy Policy
DigitalShyft LLC · Last updated 21 October 2026
This policy covers the DigitalShyft client portal at portal.digitalshyft.com and the DigitalShyft iOS and Android apps. It describes what we hold about the people who sign in, why, and who else sees it.
Accounts are created by DigitalShyft for clients we work with. There is no public sign-up.
What we collect
| Data | Why we hold it |
|---|---|
| Email address and name | Your sign-in identity, and how we address you in notification emails. Supplied by us when your account is created. |
| Password | Stored only as a salted hash. We cannot read it and cannot tell you what it is. |
| Device details | When you sign in on a phone we record the platform, OS version, app version and a device label, plus a push token. This is what powers the signed-in device list and lets you sign a lost phone out. |
| Requests you send us | The text of a request and any photo or file you attach. This is work you are asking us to do, so we keep it with your account. |
| Notification preferences | Which categories you want, on which channel, and your quiet hours. |
| Questions to the AI assistant | If you use “Ask AI”, your question and the dashboard figures needed to answer it are sent to Anthropic. See Who else sees it. |
| Sign-in activity | Timestamps and IP address for sign-ins and token refreshes, kept so that account takeover is detectable. |
| Your marketing analytics | The figures the dashboard exists to show: traffic, search, ads and email performance for the properties you have connected. This is your data about your own business. |
Facebook and Instagram comments
A business can connect its Facebook page, and the Instagram account linked to it, so the portal can tell its users about new comments. The portal then keeps the page's name and ID, an encrypted access token for the page, each comment's text, the commenter's name or username and when it was posted, and the caption and link of the post. It uses them only to show and email those comments to that business's own portal users. It cannot post, reply, edit or delete anything on Facebook or Instagram. How to disconnect and have this data deleted.
YouTube channels
A business can connect its YouTube channel, so the portal can show how its videos perform. The business's owner or manager signs in with Google and gives the portal read-only access. The portal then keeps:
- the channel's name and ID, and an encrypted access token;
- the channel's and each video's numbers over time: views, watch time, subscribers gained and lost, likes, comments, shares, and revenue and ad figures if the owner allows them;
- breakdowns YouTube reports for the channel: where viewers are, how they found the videos, and which devices they used, plus age and gender groups that YouTube reports only as percentages, never as individual people;
- the public comments on the channel's videos: the comment text, the commenter's public YouTube name and channel, likes and reply counts, and when it was posted;
- the channel's public subscriber list: the public names and channels of subscribers who chose to make their subscriptions public.
The portal uses this only to show these numbers and comments to that business's own portal users, and to email DigitalShyft staff about new comments. It cannot upload, post, reply, edit or delete anything on YouTube.
YouTube data is read through the YouTube API Services. By connecting a channel you agree to the YouTube Terms of Service. Google's use of the data is covered by the Google Privacy Policy.
Stopping access and deleting the data. On the Social tab, click Disconnect next to YouTube. The portal cancels its access with Google at once, and deletes the channel's YouTube data within 7 days. You can also remove DigitalShyft's access in your Google account at myaccount.google.com/permissions. The portal then deletes the channel's YouTube data within 30 days. To have it deleted sooner, email david@digitalshyft.com.
Copies of comments, video details and subscriber lists are refreshed from YouTube at least every 30 days, and anything removed on YouTube is removed here too.
What we do not do
- We do not track you across other apps or websites.
- We do not sell or rent your data to anyone.
- We do not use your data for advertising, ours or anyone else’s.
- We do not show one client another client’s data. Every request is scoped to the accounts your email holds.
- We do not read your password. It is stored hashed.
Who else sees it
| Service | What reaches them |
|---|---|
| Railway | Hosting. The application and its database run on their infrastructure. |
| Apple (APNs) | Push notifications to iPhones: the notification title and body, and your device token. |
| Google (Firebase Cloud Messaging) | The same, for Android devices. |
| SendGrid | Notification emails: your address and the message. |
| Anthropic | Only if you use “Ask AI”: your question and the relevant dashboard figures. Not used to train their models. |
| Google (Analytics, Search Console, Ads) | Read-only. We pull your figures from accounts you have connected; nothing is sent back. |
| Google (YouTube API Services) | Read-only. We read a connected channel's figures, videos and public comments. Nothing is sent back. |
Each is used only to run the service. None of them is given your data for their own purposes.
How long we keep it
Account data, requests and analytics history are kept for as long as your account is open, because the dashboard is a record over time and deleting last year would defeat it.
A signed-in device stops being usable the moment you sign it out, and its sign-in credential expires within 90 days regardless.
Deleting your account
Email david@digitalshyft.com and we will delete your account and the data associated with it. We will confirm when it is done. Accounts are created and removed by DigitalShyft rather than self-serve, because access is by invitation.
If you hold access to more than one client, tell us whether you want all of it removed or only one.
Security
- Everything is served over HTTPS.
- Passwords are stored hashed, never in readable form.
- The app’s sign-in credential is held in the iOS Keychain, and on Android in the app’s private storage, which is excluded from device backups.
- Signing in on a phone can be protected with Face ID or Touch ID.
- Every dashboard request is checked against the accounts your email holds, on the server, on every request.
Children
This is a business tool. It is not directed at children and we do not knowingly collect data from anyone under 13.
Changes
If this policy changes we will update the date at the top. If a change materially affects what we hold or who sees it, we will tell account holders directly rather than relying on you to re-read this page.
Contact
DigitalShyft LLC · david@digitalshyft.com