Data Processing Agreement

1. Parties

This Data Processing Agreement ("DPA") forms part of the EmerRoster Terms of Service between the customer organization ("Controller") and EmerRoster ("Processor").

2. Subject matter and duration

Processor provides the EmerRoster SaaS rostering platform. Processing continues for the term of the service and any retention period after cancellation (default 90 days, unless a retention hold applies).

3. Nature and purpose of processing

Processing includes storage, retrieval, structuring, and transmission of workforce scheduling data to deliver roster planning, leave/swap workflows, notifications, and related features instructed by Controller via the product.

4. Types of personal data and data subjects

Categories may include identity and contact data, employment-related scheduling data, optional wage rate fields, and usage/audit metadata for staff members and administrators invited by Controller.

5. Processor obligations

• Process personal data only on documented instructions from Controller
• Ensure persons authorized to process data are bound by confidentiality
• Implement appropriate technical and organizational security measures
• Assist Controller with data-subject requests where feasible via the product or support
• Delete or return personal data after the end of services, subject to retention settings
• Make available information necessary to demonstrate compliance with Art. 28 GDPR

6. Subprocessors

Controller authorizes Processor to engage Google Cloud / Firebase as subprocessors for hosting, authentication, database, and functions. Processor will impose data-protection obligations no less protective than this DPA. Material subprocessor changes will be communicated where required.

7. International transfers

Where personal data is transferred outside the EEA/UK, Processor will ensure an appropriate transfer mechanism (such as SCCs) is in place with subprocessors, as provided by those providers' terms.

8. Security incidents

Processor will notify Controller without undue delay after becoming aware of a personal data breach affecting Controller data, and provide information reasonably available to assist Controller with its notification obligations.

9. Deletion

Upon organization cancellation, Processor marks the organization cancelled and blocks operational writes. After 90 days (unless Controller enables a retention hold), Processor permanently deletes organization data from production systems, subject to legal retention requirements and backup cycling.

10. Contact

DPA / privacy: privacy@emerroster.app.