Privacy Policy

This explains what Rotaserie collects, why, and who can see it. In short: we collect what's needed to run a restaurant's schedule, we don't sell it, and we don't run ads or third-party trackers.

What we collect

• Account details: name and email. Passwords are stored scrambled (hashed), never in readable form. Two-step login (required for managers, optional for staff) also stores an encrypted key for your authenticator app and scrambled copies of your recovery codes.
• Scheduling information: shifts and positions, availability, time-off requests, shift trades and pickups, notes, and pay-related settings the restaurant enters.
• Restaurant information: restaurant name, address, settings, and optionally daily sales figures imported from a point-of-sale export.
• Activity and security records: a log of schedule changes, emails we sent, and failed login attempts and new restaurant sign-ups with the device's IP address (to block password guessing and abuse). Our host also keeps ordinary server logs.
• Notifications: if you turn on push notifications, your browser's notification address.

How we use it

To show schedules, send reminders and notices, apply the restaurant's rules, keep accounts secure, fix problems and improve the app. Managers of your restaurant can see its staff list and schedule data. Other staff see what the app shows them, such as the schedule and who they work with. Data from one restaurant is kept separate from every other restaurant's.

Cookies

We use only the cookies needed to keep you signed in, protect forms, remember a device for two-step login when you ask us to, and remember your display choices (like dark mode). We don't use advertising or analytics cookies.

Who else handles it

• Render hosts the app and its database.
• GitHub stores encrypted off-site backup copies. They are scrambled before they leave our server and GitHub cannot read them.
• Brevo delivers our emails, so it receives recipients' email addresses and message text.
• Calendar apps (Google, Apple, Outlook): only if you choose to add your shifts, using a private link.

We don't sell or rent personal information. We share it only with these providers to run the service, if the law requires it, or to protect people's safety or our rights.

How long we keep it

We keep a restaurant's data while it uses Rotaserie. Sign-in sessions expire after 30 days and password reset links expire quickly. Nightly backups are kept for 30 days. Encrypted off-site copies are kept in a private archive that we replace with a fresh one at least once a year. When a restaurant asks us to delete its data, we remove it from the app, and it disappears from backups as they age out.

Your choices

You can ask to see, correct or delete your information. Staff should start with their manager, who can change or remove records in the app; you can also email us. A restaurant can ask us to delete all its data. You can turn off push notifications in your browser at any time.

Security

Connections are encrypted, passwords are hashed, forms are protected against forgery, and login attempts are rate-limited. No system is perfectly secure, so if you suspect a problem please tell us.

Children

Rotaserie is for workplace use and is not directed at children under 13. Restaurants may schedule staff who are minors; the restaurant is responsible for having the right to enter their information.

Changes and contact

If we change this policy we'll update the date above, and email restaurants about significant changes. Questions or requests: robertebanchero@gmail.com.