Privacy Policy

This Privacy Policy applies to the ScheduleRest website, owner dashboard, employee portal, emails, and related services (collectively, the “Service”). “ScheduleRest,” “we,” “us,” and “our” refer to the operator of the Service.

A business owner or manager controls the workplace information they add to ScheduleRest and decides which employees may join their team. Employees should contact their employer first about workplace records. We handle that information to provide the Service and to respond to valid privacy requests.

• Account and profile information: name, store or workspace name, email address, password hash, account role, verification status, and account status.
• Team and scheduling information: employee names, email addresses, roles, availability, staffing requirements, store hours, shifts, saved schedules, and published schedules.
• Time-off information: requested dates, an optional reason, request status, and the associated employee and manager. Please do not include unnecessary medical or other highly sensitive details in a time-off reason.
• Invitation and communication information: invited email addresses, invitation codes, verification tokens, email delivery requests, and related timestamps.
• Subscription information: plan, trial dates, subscription status, and Stripe customer and subscription identifiers. ScheduleRest does not receive or store complete payment card numbers.
• Technical and security information: IP address or a derived identifier, essential session data, request metadata, and limited diagnostic logs used to operate, secure, and troubleshoot the Service.

We receive information directly from owners, managers, and employees; from an employer that invites or schedules an employee; automatically when someone uses the Service; and from service providers such as Stripe when they confirm subscription activity.

• Create, verify, authenticate, and protect accounts.
• Create, save, publish, and display workplace schedules.
• Connect invited employees with the correct manager or workspace.
• Submit and display time-off requests to the appropriate team.
• Provide trials, subscriptions, invoices, and billing management.
• Send transactional emails, including invitations and verification links.
• Prevent abuse, enforce rate limits, diagnose errors, and improve reliability.
• Comply with law, resolve disputes, and enforce our Terms of Service.

We disclose information only as needed to operate the Service, at a user’s direction, or as required by law. This includes:

• Your workplace team: managers can view information associated with their employees, including time-off requests. Connected team members may see names, roles, and shifts on published schedules.
• Infrastructure providers: Vercel for application hosting and operational logs, and MongoDB Atlas for application data storage.
• Service providers: Stripe for subscription billing, Resend for transactional email, and Upstash for security rate limiting.
• Legal and safety needs: authorities or other parties when reasonably necessary to comply with law, protect rights and safety, investigate fraud, or enforce agreements.
• Business transfers: a successor involved in a merger, financing, acquisition, or sale, subject to appropriate confidentiality and applicable law.

We do not sell personal information or share it for cross-context behavioral advertising. We do not use third-party advertising trackers in the Service.

ScheduleRest uses essential cookies and browser storage to keep users signed in, protect sessions, preserve a verification step, and support core application functions. These technologies are not used by us for targeted advertising.

We retain account and workplace data while an account is active and as reasonably necessary to provide the Service, maintain security, resolve disputes, and meet legal obligations. Verification links are designed to expire after 24 hours. Security rate-limit records are retained for short, configured windows. Backup copies and billing or transaction records may remain for a limited period after deletion where required for security, tax, accounting, or legal purposes.

Canceling a subscription does not automatically delete an account or its schedules. Contact us to request account deletion. Employee data may also be subject to the employer’s retention responsibilities.

We use reasonable administrative and technical safeguards, including hashed passwords, access controls, email verification, rate limiting, signed billing webhooks, and HTTPS connections. No online system can guarantee absolute security. Users must protect their passwords and notify us if they suspect unauthorized access.

You may update certain information through the Service and may request access, correction, deletion, or a copy of personal information by contacting us. Depending on your location, additional rights may apply, including the right to appeal a denied request or to receive equal service after exercising a privacy right. We may need to verify your identity and authority before completing a request.

Employees requesting changes to employer-controlled scheduling or workplace records should contact their manager or employer first.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. An employer that permits a minor employee to use ScheduleRest is responsible for providing required notices and obtaining any consent required by employment and privacy law.

ScheduleRest and its providers may process information in the United States and other countries where privacy laws may differ from those in a user’s location. Where required, we use appropriate safeguards for those transfers.

We may update this policy as the Service or applicable requirements change. We will post the revised policy with a new effective date and, when appropriate, provide additional notice through the Service or by email.

Questions or privacy requests may be sent to schedulerestsupport@gmail.com. Please do not include passwords, payment card details, or sensitive medical information in an email.