BedShift

Last updated: March 21, 2026

Privacy Policy

1. Data Controller

ANUBRIS (PRIVATE) LIMITED("we", "us") is the data controller for personal data processed through BedShift. This policy is compliant with the Personal Data Protection Act 2023 (PDA 2023) of Pakistan and aligned with the EU General Data Protection Regulation (GDPR) where applicable.

2. Data We Collect

Personal Information

  • Full name, email address, phone number
  • CNIC (Computerized National Identity Card) number where required by tenant
  • Profile photograph (optional)

Usage Data

  • Pages visited, features used, and actions taken within the platform
  • Device type, operating system, browser, and IP address
  • Timestamps of access and session duration

Financial Data

  • Payment method details (processed and stored by Safepay, not by us)
  • Transaction history, invoices, and subscription status

3. How We Use Your Data

  • Service Delivery — to provide and maintain the BedShift platform.
  • Billing — to process subscription payments and issue invoices.
  • Communication — to send transactional emails, notifications, and support responses.
  • Analytics — to understand usage patterns and improve the Service (aggregated, non-identifying data only).

4. Data Sharing

We share data only with the following third-party processors, strictly for service operation:

  • Safepay — payment processing and subscription management.
  • Firebase Cloud Messaging — push notifications to mobile devices.
  • SMTP (mail.anubris.com) — transactional and system email delivery.
  • MinIO — self-hosted object storage for uploaded files and documents.

We do not sell, rent, or trade your personal data to any third party.

5. Data Retention

We retain your personal data for the duration of your active account plus two (2) years after account closure or deletion. After this period, all personal data is permanently deleted. Anonymized, aggregated data may be retained indefinitely for analytical purposes.

6. Your Rights

Under PDA 2023 and GDPR, you have the right to:

  • Access — request a copy of your personal data.
  • Rectification — correct inaccurate or incomplete data.
  • Deletion — request deletion of your personal data.
  • Portability — receive your data in a structured, machine-readable format.

To exercise any of these rights, contact us at the address below.

7. Cookies

We use essential cookies only, required for authentication and session management. We do not use third-party tracking or advertising cookies. See our Cookie Policy for full details.

8. Children

BedShift is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete that information promptly.

9. Contact

For privacy-related inquiries, contact our Data Protection Officer at [email protected].