How Midshift handles your data.
A plain-English explanation of what Midshift collects, where it is stored, when AI processing is used, who can access it, and how long it is kept. This page should be read alongside the Privacy Policy, Terms of Service and Ethical AI page.
Your data is used to deliver your engagement, not for advertising.
Midshift stores your engagement data in the Australia/New Zealand region and uses Anthropic Claude for AI processing. We do not send your data to OpenAI, Google, or any other AI provider.
How Midshift Handles Your Data
Plain English. Updated 1 May 2026.
What data does Midshift collect?
When you use Midshift, we collect the information needed to run your process improvement engagement.
- Your name, email address, and organisation name.
- Information about the process you want to improve.
- Stakeholder names and email addresses, used to send interview invitations.
- Interview transcripts from stakeholder conversations.
- Documents you upload, including SOPs and process documentation.
- The analysis and reports we generate from your engagement.
Where is my data stored?
Your data is stored in Supabase, hosted in Sydney, Australia. It does not leave the Australia/New Zealand region except for AI processing, which is explained below.
Does AI see my data?
Yes, and we want to be transparent about this. Midshift uses the Anthropic Claude API to power stakeholder interviews and generate analysis. This means interview transcripts and engagement context are sent to Anthropic’s servers for processing.
Anthropic operates under a commercial API agreement with data protection commitments. They do not use API data to train their models by default. You can review Anthropic’s privacy information at anthropic.com/privacy. You can also read Midshift’s Ethical AI page for more context on how AI is used in the service.
We do not use any other AI services. We do not send your data to OpenAI, Google, or any other AI provider.
Who else can see my data?
Within Midshift, access is limited to the people who need it to complete your engagement.
- You and your authorised stakeholders can see your engagement data.
- Steve Wilson, senior BA at Changeable, reviews all reports before delivery.
- No other person has access to your data within Midshift.
Outside Midshift, data is shared only with service providers required to deliver the service.
- Anthropic: AI processing.
- Resend: Email delivery, using your email address only.
- Stripe: Payment processing, using financial data only.
We do not sell, share, or disclose your data to anyone else.
How long do you keep my data?
We keep your data for as long as your account is active, plus 90 days after account closure. After that, it is permanently deleted. You can request earlier deletion at any time by emailing steve@changeable.co.nz or using the contact page.
Is my data secure?
Yes. Your data is protected through technical and access controls.
- Data is encrypted in transit using TLS.
- Data is encrypted at rest in Supabase.
- Access is controlled so you can only see your own data.
- All administrative access is protected by multi-factor authentication.
For the broader legal privacy position, see the Midshift Privacy Policy.
Can I get a copy of my data or have it deleted?
Yes. Email steve@changeable.co.nz or contact us through the Support page and we will respond within 5 working days.
Questions?
Contact us at steve@changeable.co.nz or use the Midshift contact page. We are based in New Zealand and respond within one business day.
A simple view of the Midshift data flow.
This summary helps clients, stakeholders and procurement reviewers understand how information moves through a typical Midshift engagement.
You provide process context
You enter process information, upload documents and invite stakeholders to contribute.
Stakeholders complete interviews
Stakeholder responses are captured as transcripts and linked to your engagement.
AI processing supports analysis
Anthropic Claude processes engagement context and transcripts to support structured analysis.
Human review before delivery
Steve Wilson reviews reports before they are delivered back to the client.
Need this reviewed for procurement or internal approval?
For questions about AI processing, data location, supplier access, security controls, deletion requests or procurement review, contact Changeable before starting an engagement.