Privacy

Shed is operated by [LEGAL ENTITY], ABN [ABN], of [ADDRESS]. Last updated [DATE].

What we record

• Who you are. When you sign in with Microsoft or Google we receive your email address, your name, and an identifier for your company's tenant or domain. We keep the email address and the company. We do not receive or keep your password; there is no Shed password.
• What you did. Every sign-in, folder listing, search, download and ZIP is recorded with the time, your email address, the path, the size and the network address it came from. This is the activity record your company's owners can see, and it is the reason you can always find out who fetched what.
• Your company's files. Whatever your company puts in its shed. We do not open, index the contents of, or analyse them. We read names, sizes and checksums to list, search and verify them.
• Enquiries. If you ask for a shed on this site we keep the form you sent and the address it came from.

What we do not do

We do not sell or share anything above with anyone, use it for advertising, or train anything on it. We do not set tracking cookies. The one cookie Shed uses keeps you signed in and nothing else.

Who else touches it

Microsoft and Google handle the sign-in, under their own terms. [OFF-SITE PROVIDER] holds the encrypted off-site copy and cannot read it. Nobody else.

How long

The activity record is kept for as long as your company has a shed and for twelve months after. Files are kept until your company asks for them to be removed, and then for the length of the snapshot window.

Your rights

You can ask what we hold about you, ask for it to be corrected, or complain, by writing to privacy@shed.work. We answer within 30 days. If you are in the UK or EU, the UK GDPR and the GDPR apply to you and we honour them. If you are not satisfied, you can go to the Office of the Australian Information Commissioner.