Privacy Policy

Effective October 8, 2026.

RosterToCal helps you turn work rosters into personal calendar events. Contact support@rostertocal.com about privacy or your data.

Information we process

We store your verified email address, sign-in identifier, account session, reading balance, subscription status and saved shifts. We do not receive your Google password. Google sign-in requests only identity information, not access to Gmail or Google Calendar.

When you request a reading, roster images are sent through OpenRouter to the selected OpenAI model to extract the named person’s shifts. A roster may also show other people’s names. Crop unnecessary information and only upload material you are allowed to share with these processors.

Storage and retention

PDFs are rendered in your browser before processing. We do not persist original images or PDFs on our server. Extracted readings, including visible names and source snippets, may be stored for up to 30 days so retries do not consume additional credits. Confirmed shifts remain in your account until you delete them. Cloudflare provides application hosting and database storage.

Deleting saved data removes your saved calendar and stored readings. Deleting your account removes your account and associated application data. Payment providers may retain transaction records as required by law. A keyed, irreversible email fingerprint is retained for up to 12 months to prevent repeated free-trial claims. It is not used to contact you. Other security records are kept only as needed to protect the service.

Sign-in and payments

Resend sends sign-in codes to the email address you provide. Session cookies keep you signed in; a local preference remembers whether animations are paused. These are used to provide the service. Payment details are entered on the payment provider’s checkout, not stored by RosterToCal.

Processors and international transfers

Cloudflare, Google, Resend, OpenRouter, OpenAI and the payment provider process relevant data under their own terms. Processing may take place outside your country. Their retention practices apply to data sent to them; our original-file storage policy does not imply that every provider retains nothing.

Your choices

You can edit or export your saved shifts, delete saved data, or delete your account from the account panel. Contact support to request access, correction or deletion assistance. Depending on your location, you may have additional data-protection rights or the right to contact a supervisory authority. We do not sell your personal data or use your roster for advertising.

Children and updates

The service is intended for people aged 18 or older. We may update this policy and will identify the effective date. Material changes affecting existing users will be communicated through the service.