Privacy Policy

Machinery Software LLC — shft Last updated: May 22, 2026

Machinery Software LLC ("Machinery," "we," "us") builds shft, a Mac-to-Mac migration and endpoint backup tool. This policy explains what data we collect, why, and what we do with it.

We collect the information you provide during checkout: your email address, name, and payment details. Payment processing is handled entirely by Stripe. We never see or store your full credit card number. Stripe's privacy policy governs their handling of your payment information.

What we store: your email address, Stripe customer ID, and the license tier you purchased. Your license key is stored only as a SHA-256 hash in our database — we cannot recover or read your license key from our records.

When you activate and use shft

The shft app sends the following to our licensing API when you activate or validate your license: your license key (transmitted over HTTPS, stored only as a hash), a hardware identifier (UUID) for your Mac, your macOS version, and the shft app version.

We use this information solely to enforce license terms (activation limits, credit tracking, subscription status). We do not use hardware identifiers to track you across services or share them with third parties.

When your organization uses managed mode

If your IT team deploys shft via MDM, the app may send lightweight telemetry to a reporting endpoint configured by your organization — not by Machinery. This telemetry includes device identifier, backup status, and vault health metadata. This data goes directly to your organization's infrastructure, not to Machinery's servers. We never receive or store managed-mode telemetry.

When you visit our website

Our website is hosted on Cloudflare Pages. Cloudflare may collect standard web analytics (page views, country-level location, referrer). We do not use tracking cookies, advertising pixels, or third-party analytics services. We do not run Google Analytics.

What we do not collect

We never collect, access, or store the contents of your files, documents, backups, or vault data. The shft app encrypts your data locally on your device before it reaches any storage target. We have no ability to decrypt your data, and your backup storage (S3, B2, local drives) is owned and controlled by you or your organization.

We do not collect browsing history, contacts, location data, or any data unrelated to license management and product functionality.

How we use your data

We use collected data for three purposes only: to fulfill your purchase and deliver your license key, to validate your license and enforce activation limits, and to provide customer support when you contact us.

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes. We do not display ads in shft or on our website.

Where your data is stored

License and activation data is stored in Cloudflare D1 (Cloudflare's edge database). Purchase data is stored by Stripe. Both services process data in accordance with their own privacy policies and applicable data protection regulations.

Data retention

License records are retained for as long as your license is active, plus 12 months after expiration or revocation. Activation records are retained for the same period. You can request deletion of your data at any time by contacting us.

If you purchase an IT Pro Pack, credit usage records (which migration used which credit) are retained for 24 months for accounting purposes.

Your rights

You may request access to, correction of, or deletion of your personal data at any time by emailing hello@machinery.software. We will respond within 30 days.

If you are located in the European Economic Area, United Kingdom, or California, you have additional rights under GDPR, UK GDPR, or CCPA respectively, including the right to data portability and the right to object to processing. Contact us to exercise these rights.

Privacy Policy

What we collect

When you purchase shft