Privacy Policy

Effective Date: January 28, 2026
This Privacy Policy explains how ShrumHR and Shrum Consulting Group (“we,” “us,” “our”) collect, use, and share information when you visit shrumhr.com or use the ShrumHR portal at app.shrumhr.com.

1) Roles: Customer Data vs. Platform Data

• Customer Data: HR information entered into the platform by a customer organization (e.g., employee records, documents, PTO requests).
• Platform Data: account and security data about platform usage (e.g., access logs, authentication events, basic account details).

2) Information We Collect

• Account information: name, email, role/permissions, access requests, and authentication details.
• HR/workforce data: employee names, contact details, job information, and related HR records as provided by the customer.
• Usage and security logs: IP address, device/browser info, timestamps, and platform activity logs used for security and troubleshooting.

3) Sensitive Data Notice

Customers should avoid storing highly sensitive data unless required for business/legal reasons and protected appropriately. Avoid uploading Social Security numbers, banking details, or medical information unless necessary and safeguarded.

4) How We Use Information

• Provide, maintain, and secure the platform.
• Authenticate users and enforce access controls.
• Operate audit logging and security monitoring.
• Respond to support requests and communications.
• Improve platform performance and reliability.
• Comply with legal obligations and enforce agreements.

5) How We Share Information

We may share information with:

• Service providers: infrastructure, hosting, monitoring, and support tools.
• Legal/compliance: when required by law or to protect rights and safety.
• Business transfers: merger, acquisition, or sale (with standard protections).

We do not sell Customer Data.

6) Cookies

We may use cookies or similar technologies for essential functionality and analytics. You can manage cookies in your browser.

7) Data Retention

Customer Data is retained based on the customer account lifecycle and instructions, subject to reasonable backups and legal requirements. Security/audit logs may be retained to protect the platform and investigate incidents.

8) Security

We use security controls designed to protect the platform, including access controls and audit logging. No system is 100% secure.

9) Contact

Privacy questions or requests:
ShrumHR / Shrum Consulting Group
[email protected]

10) Updates

We may update this policy from time to time. The “Effective Date” above indicates the latest revision.