What you share
Your account can include professional details, learning goals, dates, destinations, plans, study-day records and uploaded documents. These support planning and recordkeeping.
After check-in, each study day records its scheduled hours. Conference check-in asks for a browser location reading to verify the destination rule. If the reading fails, you can confirm your location with a signed statement instead, and the day is labeled self-attested. Location is read only at check-in and is not tracked at other times.
How information is processed
Clerk handles sign-in. The application runs on Cloudflare Workers, with account records in Neon through Hyperdrive and private files in Cloudflare R2.
Conference planning and learning delivery use a learning-content provider. A confirmed conference sent to that provider can include its destination's name and designated center coordinates; your own check-in location readings are not sent to it. Certificate extraction runs within isolated application processing services. Destination lookup uses a bundled city index; search text is not sent to an address provider.
Shift CME sends messages by email only.
Website measurement
Cloudflare Web Analytics measures website usage with collection configured to exclude EU visitors. Shift CME also measures which public pages and campaigns lead to signup, a paid membership and a first confirmed conference. This uses a random identifier in browser-tab session storage, valid for up to 30 days, and links it to your account if you sign up in that tab.
Acquisition records contain a public landing-page path, a source and campaign label, and milestone timestamps. They do not retain full URLs, search terms, IP addresses or your learning content. A paid membership is measured from a verified positive payment. Reports exclude linked staff and internal/test accounts. Acquisition collection honors browser Do Not Track and Global Privacy Control signals and excludes EU visitors. Records are removed after 180 days by daily cleanup; account-linked records are also removed when the account is deleted.
Access and accuracy
Your records are accessed through your signed-in account. Shift CME does not grant another person access solely because they are associated with your employer or another organization.
Review your plans and records. Correct mistakes and keep the original provider-issued documents.
Your choices
Update your profile in your account. Download each conference's documents as PDFs from its conference page.
Delete your account from Account → Delete account. Email support@shiftcme.com for access, correction, export, retention, or removal requests.
Sharing and service providers
Information is disclosed only as needed to operate the service, comply with law, protect users and the service, or complete a transaction you request. Current processors support identity, hosting, databases, private file storage, automated planning, certificate processing, payment, and email delivery. Shift CME does not sell professional records or precise location data.
Shift CME does not share mobile numbers or messaging opt-in and consent information with third parties or affiliates for their marketing or promotional purposes. Shift CME may disclose that information only to service providers that help deliver Shift CME messages, or when required by law.
Shift CME uses Resend, a United States-based email provider, to deliver email, acting as a processor under its data processing agreement. Resend receives the recipient email address, the content of email messages, and delivery events. The tags Shift CME attaches to these emails are opaque identifiers that contain no names or clinical content, and open and click tracking are turned off for Shift CME's sending domain. Resend's published terms state that email and log data is retained for 30 days and that remaining customer data is deleted within 90 days after a Resend account ends; those are Resend's stated terms, not a guarantee by Shift CME. Shift CME deletes its own copies of this data by the account-cancellation deletion deadline described under Deletion. Resend does not offer a way to delete an individual sent email early, so any copy Resend still holds expires under Resend's own terms, which Shift CME does not control. If a message bounces or is reported as spam, Resend may keep the address on its suppression list for a period it does not publish.
When you confirm a conference or your records are made, Shift CME emails you the documents as PDF attachments. Your records include your course evaluation if you submitted one. Resend processes the attachment as part of the message under the terms above. Copies delivered to your mailbox, and any you save or forward, are outside Shift CME's control and are not removed when Shift CME deletes your account data. Copies in Records follow the retention and deletion terms below.
For a private conference pilot's schedule proposal, Shift CME uses OpenAI, a United States-based automated planning provider, acting as a processor under its API Data Processing Addendum. That request contains only topic labels and, for each source, its PubMed Central identifier, title, citation fields (such as journal, year, authors), and numeric bounds; it does not include your name, precise location, dates, venue, or other free text. Requests are sent with storage disabled (store: false), so OpenAI does not persist the call as retrievable conversation state. OpenAI's published terms state it may still retain API inputs and outputs for up to 30 days for abuse monitoring; that is OpenAI's stated term, not a Shift CME guarantee, and any copy OpenAI still holds expires under OpenAI's own terms, which Shift CME does not control.
Conference study days
For scheduled conference study days, Shift CME stores the time of your one conference check-in, location evidence collected at check-in, the hours recorded for each study day and any corrections you make to them. If you submit the optional course evaluation (what you learned and how it will affect your practice), Shift CME stores it too.
This supports your per-day record and your conference records. Your signed-in account provides access to this information and the records made for your conference. Authorized staff may access records when needed to provide support or operate the service. The hours in your records reflect the scheduled learning time and any corrections you report. They are not a verification of attendance or an award of CME credit.
Your records are made at 10:00 PM destination time on your conference's last study day, or earlier if you choose Get my records now. This information is kept and deleted on the same schedule as the rest of your conference record, described under retention and deletion.
Do not include patient names, dates of birth, record numbers, or other information that could identify a patient in your course evaluation or any other study-day entry.
Retention
While your account is active, accepted conference evidence, accepted original sources, and precise location collected at check-in are kept for seven calendar years from the applicable record anchor. Real amendments, such as a correction to your hours after your records are made, may extend a dependent record bundle; viewing, downloading, retrying, or re-rendering does not.
Shift CME may retain the minimum transaction, tax, fraud-prevention, consent, suppression, security, and deletion receipt evidence required to document what occurred. Those records are not used as a hidden archive of deleted conference content, and deleted content is not restored from backup. Our learning-content provider keeps its own record of the modules you were enrolled in and your activity, and does not erase it.
Deletion
Deleting your account is an account-cancellation request. Learning stops immediately: you can no longer play presentations, take knowledge checks or check in, and renewals and new purchases and conferences stop. Your course evaluation, records and downloads stay available until the deletion deadline, 30 days (720 hours) after Shift CME accepts the request; records due in that time are still made. After the deadline Shift CME deletes your customer content, even if you paid for access beyond that date. The paid-through date cannot postpone deletion. Legal holds and verified operational constraints may delay deletion only as long as they require. For questions about billing after deletion, email support@shiftcme.com.
Your privacy rights
You may request access, correction, export, or deletion. Applicable law may provide additional appeal or complaint rights. Identity verification may be required before fulfilling a request.
