Privacy
What this portal keeps about you, where, and for how long. It's here so your scheduling group can take your time-off requests and, later, show you your schedule.
What's kept
- Your account: your name, your email address, a scrambled form of your password (never the password itself), and the public half of any passkey you add. The private half never leaves your device.
- Your groups: which scheduling groups you belong to and your role in each, and which person on the group's list you are.
- The group's list of people, sent by its scheduler: names, roles and email addresses.
- Security events: sign-ins, passkeys added or removed, email changes, with the time and network address, so you and the group can see what happened to your account.
- Later, your requests and duties, as your group starts using them here.
Nothing about your health is asked for or kept. No advertising, no tracking, and nothing is sold or shared outside your group.
Where
On a server in Toronto, Canada, with the database on that same server. Backups are encrypted before they leave it, and kept in Toronto too. Email is sent through a mail service, which sees the address and the message.
Who can see it
Only people in your group, and only what their role allows: you see your own requests; the group's schedulers see the group's. The person running the service can reach the server to keep it working, and doesn't look at a group's records without the group's permission.
How long
- Your account, until you or your group ask for it to be removed.
- Security events, as long as your account.
- Backups, for up to a year (daily for a month, then monthly), after which they're deleted.
Questions or changes
Write to seamus.laberge@gmail.com to see what's kept about you, correct it, or have it removed.