Privacy Policy

This Privacy Policy explains how The Shift (“The Shift”, “we”, “us”) collects, uses, and protects information when you visit the-shift.dev (the “Site”), register for an event, submit a talk, or otherwise interact with us. By using the Site you agree to the practices described here.

1. Information We Collect

We collect only the information needed to run our events:

• Registration details — your name, email address, company/organization, professional role, and optional social profiles (e.g. LinkedIn, X) provided when you RSVP or join a waitlist.
• Talk submissions — the title, abstract, category, and speaker details you provide when submitting a session.
• Invitation data — when you arrive via an invite or referral link, we record which link was used so we can attribute attendance.
• Usage analytics — aggregate, non-identifying counters such as page views and invite-link visits. We do not use third-party advertising or cross-site tracking cookies.

2. How We Use Your Information

• To process your registration or talk submission and manage attendance.
• To send transactional emails — confirmations, approvals, reminders, and event updates.
• To review and select talks, and to communicate with speakers.
• To understand aggregate interest in the event and improve future editions.

We do not sell your personal information, and we do not use it for advertising.

3. Legal Basis

We process your information to perform the registration/submission you requested (contractual necessity), to send you event communications you reasonably expect, and based on our legitimate interest in organizing and improving our events. Where required by law, we rely on your consent, which you may withdraw at any time.

4. Third-Party Service Providers

We share data only with vetted providers that process it on our behalf:

• Upstash (Redis) — secure storage of registration and submission records.
• Resend — delivery of transactional and event emails.
• Vercel — website hosting and infrastructure.
• Google — where we use Google services (e.g. Calendar invitations or spreadsheets) to coordinate the event. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

These providers may process data outside your country. We take reasonable steps to ensure an adequate level of protection for any such transfers.

5. Data Retention

We retain registration and submission data for as long as needed to operate the relevant event and for a reasonable period afterward for follow-up and planning future editions. We delete or anonymize data when it is no longer needed, or earlier upon a valid deletion request.

6. Your Rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal information, object to or restrict certain processing, and request a copy of your data. To exercise any of these rights, contact us at [email protected]. You may also unsubscribe from non-essential emails at any time using the link in those messages.

7. Data Security

We use industry-standard measures — encrypted transport (HTTPS), access-controlled storage, and trusted infrastructure providers — to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children

The Site and our events are intended for professionals and are not directed to children under 16. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated effective date at the top of this page.

10. Contact Us

Questions or requests regarding this policy or your data can be sent to [email protected].