Privacy policy

Last updated [date].

Who is responsible

For the information your plant enters about its employees, your employer is the controller and [Company legal name] acts as its processor. For account details such as your name and email, we are the controller.

What we store

• Account details: name, email, password hash, role.
• Plant records you enter: team members' names and employee numbers, certifications, attendance reasons, rotations, audits, manager notes.
• Technical data: sign-in times, device type, activity log.

How we use it

To run the service, keep it secure, send account emails such as password resets and trial notices, and bill for paid plans. We do not sell personal data or use it for advertising.

Who else sees it

Hosting and email providers, and our payment provider for billing details. [List providers and countries.] Payment card details are handled by the payment provider and not stored by us.

Retention and deletion

We keep plant records while the plant is active. A plant admin can export everything, and can ask for deletion, after which data is removed within 30 days. Backups expire on a rolling schedule.

Your rights

Depending on where you live you may have rights to access, correct or delete your data. Employees should contact their employer first. [Contact for privacy requests.]