Privacy policy

Account

Creating an account asks for an email and a password, and for agreement to these terms and the privacy policy. The name is not typed on that screen. For an employee it is taken from the card already saved. For a business owner it is taken from the approval the system admin entered.

The password is stored encrypted by Supabase, the sign-in provider, not as plain text in Rota.

Before the first sign-in, a message may be sent to confirm the address. That is a service message, not marketing mail.

Why the data is kept

The data is kept to run the account, the schedule, the constraints, attendance, messages, and the business reports.

The business that enters details about workers decides what to fill in, and it is responsible toward its workers. Rota runs the system where that data is stored.

What a business enters about people

Scheduling stores a name, phone, sign-in email, role, availability, assignments, absences, documents, work messages, and clock punches.

The personal card, with identity number, date of birth, gender, marital status, address, and bank details, is optional. Scheduling does not read it. Leave blank anything the business does not need.

Rota does not move money and does not use bank details to collect a fee.

Location

Location is requested only on the clock-in screen, to record the punch. There is no background tracking and no location collection on other screens.

Outside services

Supabase stores sign-in and the business data. The site itself is served through Vercel. Data may be processed outside Israel. The product needs that to run.

The Heebo and Inter fonts ship with the app. The browser does not call Google to show them.

The Hebrew calendar is calculated on the device, with no outside call.

If a manager asks for a scheduling explanation or a reading of an availability note, and an OpenAI or Anthropic key is configured, that request text, the employee name, and the shift are sent there. Without a key, the request stays on the server. There is no advertising kit, traffic analytics, or error tracker.

Mail

There is no mailing list and no marketing email, so there is no unsubscribe link. Messages inside the product are work messages from the employer, not a newsletter.

How long

The data is kept while the business account is active, unless the agreement with that business says otherwise.

Deleting the business deletes its sites, schedules, people, documents, and punches.

Rights

A request to see data, correct it, or ask for deletion can be sent to rota.ai.schedule@gmail.com.

A worker who asks about details the business entered should start with the business. The business decided what to keep.

Deletion

Settings includes data deletion. The business owner can delete the business: sites, schedules, people, documents, and punches.

Someone who is not the only owner can delete their own sign-in. The record the business kept stays until a manager deletes that person from the team screen.

Age

A new account is for someone 18 or older who is opening a business. Rota is not for children. A worker can be younger. A date of birth, if filled in, is an optional business field, not an age gate.

Operator

The service is called Rota. It is a tool for a work schedule, constraints, attendance, and messages for a business and its staff.

For these documents, write to rota.ai.schedule@gmail.com.

The registered name, address, and company number appear in the agreement with each business. They are not invented on this page.

Any fee is set in the agreement with that business. The site has no single price list, and the product does not take a commission out of the system.