Privacy Policy

Workrota is a staff scheduling product operated by Drepyn LLC (“we”, “us”). It is used by hospitality businesses (“workspaces”) to build schedules, trade shifts, and communicate with their teams, on the web and through our iOS and Android apps. Questions: support@workrota.app.

Account information. Name, email address, password (stored as a salted hash — we never see it), and optionally a phone number, birthday, and profile photo.

Work information. Your roles, availability, scheduled and worked shifts, shift trades, time punches, and pay-rate data your employer enters. Your workspace's managers control much of this data — for questions about it, start with them.

Messages. Posts and direct messages you send on your workspace's message wall stay within your workspace; we process them to deliver the service.

Device & usage information. Push notification tokens (if you enable notifications), device type, and product usage events (pages viewed, features used) that help us fix problems and improve the product. We use cookies only to keep you signed in and to run the service — not for advertising.

To run WorkRota: showing schedules, routing shift-trade approvals, delivering messages and notifications, generating draft schedules for managers, sending transactional email (invites, notifications), preventing abuse, and improving the product. We do not sell your personal information, and we do not use it for third-party advertising.

We use a small set of vendors to operate the service, each processing data only on our instructions: Supabase (database & authentication), Vercel (hosting), Resend (email delivery), Expo and Apple/Google push services (notifications), Sentry (error monitoring), PostHog (product analytics), and Anthropic (AI-assisted draft scheduling — schedule and availability data only, not your messages).

We keep your data while your account is active. You can delete your account any time in Settings → Delete account (in the app or on the web). Deletion removes your personal information; anonymized operational records (for example, that a shift was worked) may be retained for your workspace's business records. Workspace owners with an active team must transfer ownership first, or contact support@workrota.app.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information. Email support@workrota.app and we'll respond within 30 days. Where your employer is the controller of workplace data, we'll route your request to them.

Data is encrypted in transit (TLS) and at rest. Access within your workspace is governed by roles and row-level security — staff see their own data and their team's schedule; pay rates are visible only to roles your workspace grants.

With your consent, we may send text messages related to your account and work schedule — for example account setup links and schedule notifications. Consent is collected in the app or from your manager during onboarding; message frequency varies with your schedule activity; message and data rates may apply. Reply STOP to opt out at any time, or HELP (or email support@workrota.app) for help. See our SMS Terms for full details.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Mobile opt-in data and consent are not shared with, or sold to, any third party. Text messaging originator opt-in data and consent will not be shared with any third parties, excluding the vendors that deliver messages on our behalf.

WorkRota is a workplace tool and is not directed to children under 16. We don't knowingly collect data from anyone under 16.

If we make material changes to this policy we'll notify you in the app or by email before they take effect.