Privacy

Two kinds of person

A venue signs up and runs its roster here. Its managers enter details about the people on that roster, who did not sign up themselves. Both are covered below, but the difference matters: the venue decides what to record about its team, and we hold it on the venue's behalf. If you are on a roster and want something changed or removed, your manager can do it directly; we will also help if you write to us.

What the service holds

• Sign-in details. An email address, handled by our authentication provider. Passwords and sign-in codes are theirs, not ours — we never receive or store them.
• Staff records the venue enters. Name, an optional phone number, the positions a person is trained for, their qualifications, the days they are available, and their time-off requests.
• Rosters. Who is scheduled, on what, when — the drafts as well as what was published.
• A record of changes. The service keeps an audit log of who changed what and when, including changes to sign-in addresses. It exists so a venue can answer “who moved this shift”, and it is why some entries outlive the record they describe.
• Basic usage measurements. Aggregate page views and page-load timings, through our hosting provider's analytics. No advertising identifiers, no cross-site tracking, and no profile of an individual.

What it does not hold

• No payment or bank details. There is no payment flow in the product.
• No location tracking. The app never asks for your position.
• No access to your contacts, photos or files, and no reading of anything outside CrewWeek.
• No date of birth, government identifiers or immigration documents.

Cookies

Four, all first-party, none for advertising: a session cookie from our authentication provider that keeps you signed in; a cookie remembering whether you chose the light or dark theme; one remembering which timezone you last read the audit log in; and, while a manager is previewing the app as a team member, one marking that session read-only. There are no third-party trackers, so there is no consent banner to dismiss.

Who else can see it

We do not sell, rent or trade any of it. Three providers process data so the service can run, and no others:

• Clerk — sign-in and sessions.
• Supabase — the database, hosted in the United States (US West).
• Vercel — application hosting, plus the aggregate usage measurements above.

We will also disclose data where the law requires it. If that ever happens and we are permitted to say so, we will tell the venue.

Inside a venue

Owners and managers can see the roster and the staff records for their own venue. A team member sees their own week and their venue's published schedule, and can edit their own contact details. Draft rosters are not visible to staff — an unpublished week is a plan, not a promise. Venues are separated: an account with access to one venue cannot read another's.

How long it is kept

Staff records and rosters are kept while the venue's account is active, because a schedule is a record an employer needs to be able to look back at. Disabling someone's access does not delete their history — the weeks they worked stay on the roster they worked. A venue can ask us to export or delete its data, and we will do it within 30 days.

Your choices

• Your phone number and contact details are yours to change, on your profile page.
• Your sign-in email can be changed through the sign-in provider; the change is recorded.
• Your name, positions and qualifications are set by your venue — ask a manager.
• Anything else, including a copy or a deletion: write to us.

Children

CrewWeek is a tool for workplaces and is not intended for children. Venues must not enter details for anyone below the minimum working age where they operate.

Changes

If this policy changes in a way that affects what we collect or who sees it, we will update the date above and tell venue owners by email rather than changing the page quietly.

Contact

info@novahourapp.com. Our terms of service cover the rest of the relationship.