Privacy Policy

1. Who we are

EmerRoster ("we", "us") provides workforce rostering software. For personal data processed to operate the service for a customer organization, that organization is typically the controller and EmerRoster acts as a processor under GDPR. See our Data Processing Agreement.

2. Data we process

Depending on how the product is used, we may process:

• Account data (email, display name, authentication identifiers)
• Organization and membership data (roles, departments, skills)
• Roster data (shifts, assignments, publish status)
• Leave and swap requests
• Optional hourly rates entered by members for personal estimates
• In-app notifications and administrative audit logs
• Technical logs needed to secure and operate the service

3. Purposes and legal bases

We process data to provide the rostering service, authenticate users, secure the platform, comply with law, and respond to data-subject requests. Where we are controller (e.g. account administration for the platform), bases may include contract (Art. 6(1)(b)), legitimate interests (Art. 6(1)(f)), and legal obligation (Art. 6(1)(c)). Where we are processor, processing follows the customer's instructions as described in the DPA.

4. Subprocessors

We use Google Firebase (Authentication, Cloud Firestore, Cloud Functions, App Hosting) to host and run the service. Processing regions are configured for EU where available (e.g. Firestore/Functions in europe-west1). Review Google's terms and DPA for subprocessors.

5. Retention

Active organization data is retained while the organization uses the service. When an organization is cancelled, we retain its data for 90 days and then permanently delete it, unless the owner places a retention hold (for example after a lawful request to preserve data). Soft-deleted member records may remain visible in historical roster assignments until organization purge.

6. Your rights

Subject to GDPR, you may request access, rectification, erasure, restriction, portability, and objection. In the product you can use Export my data (My area) for a machine-readable export of your personal data. Organization owners can cancel (delete) their organization from Settings. Contact privacy@emerroster.app for other requests. You may lodge a complaint with your supervisory authority.

7. Security

Access is protected with Firebase Authentication. Firestore security rules isolate organization data to members of that organization. Administrative actions are recorded in audit logs.

8. Contact

Privacy inquiries: privacy@emerroster.app. Replace this address with your production contact before launch.