Privacy Policy

1. What this policy covers

This policy explains how OneRosta ("we", "us") handles personal data when you use our Service at onerosta.com. It applies to workspace owners, managers and contractors, and to visitors of our website.

2. Data we collect

• Account data: your name, work email address, password (stored only as a secure hash) and sign-in method.
• Workspace data: the schedules, shifts, leave requests, swap requests, open shifts, team profiles, timezones, skills and coverage settings you and your team create.
• Support and feedback: support tickets, feedback and feature requests you send us, including your name, email and workspace name.
• Service data: usage and error logs needed to run and secure the Service.

3. How we use data

We use your data to operate the Service — building schedules, sending notifications, handling approvals — to provide support, to secure accounts, to prevent abuse, and to improve the product. We do not sell personal data, and we do not use workspace content to advertise to anyone.

4. Who can see your data

Workspace data is visible only to members of your workspace, according to their roles. Owners and managers see drafts and coverage information; contractors see their own schedules and assigned work. Our staff can access workspace data only for troubleshooting, with controls and audit notes, as described in the in-app support process.

5. Email notifications

We send transactional emails for scheduling events (published schedules, leave and swap decisions, open shifts), trial and account status, and security notices. Every notification email includes an unsubscribe link; required security and account notices cannot be turned off.

6. Data retention and deletion

You can edit or remove workspace data at any time. When a workspace is deleted, its data is removed in line with our deletion process, with short backup retention for safety. If your trial ends or a subscription lapses, your data stays available in read-only mode so nothing is lost.

7. Security

We protect accounts with hashed passwords, encrypted connections, and — for our own platform staff — mandatory two-factor authentication. Workspaces are fully isolated from one another at the data level. No method of transmission or storage is perfectly secure, but we work continuously to safeguard your data.

8. Your rights

Depending on where you live, you may have rights to access, correct, export or delete your personal data, and to object to certain processing. To exercise these rights, contact us from the Help Center in the app or by email to support@onerosta.com. Workspace owners may also request deletion of their workspace and its data.

9. Changes to this policy

We may update this policy as the Service evolves. Material changes will be communicated to workspace owners before they take effect, and the "Last updated" date above will always reflect the current version.

10. Contact

For any privacy question or concern, contact support@onerosta.com.