RooPrivacy Policy
Last updated: 20 October 2026
In short
- CrewConnect stores your business's data in Sydney, Australia.
- We use it only to run CrewConnect for you — we don't sell it or use it for advertising.
- Your business decides what staff information goes in, and can ask us for a copy or to delete it.
- Questions or concerns: hello@rooworks.app. We reply within one business day.
1. Who we are
CrewConnect is provided by RooWorks Pty Ltd ("RooWorks", "we", "us"), an Australian company. This policy explains how we handle personal information in CrewConnect (the app at crewconnect.rooworks.app) and on this website (rooworks.app), in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
2. Who this policy covers
- Business customers — the owners and managers who sign up and run CrewConnect for their business.
- Staff — the people a business adds to CrewConnect so they can see shifts, clock in and out, and use checklists or stock tools.
- Visitors to this website, and people who email us or book a call.
When a business adds its staff and their details, the business is responsible for having the right to do so and for telling its staff how their information is used. We handle that information on the business's behalf, to provide CrewConnect to it.
3. What we collect
| Information | Examples |
|---|---|
| Account and contact details | Name, email address, phone number, profile photo, role (owner, manager or staff), employee number, employment type and start date. |
| Work information | Rostered shifts, clock-in and clock-out times, breaks, times marked as unavailable, timesheet adjustments and the notes explaining them. |
| Pay information | Pay rates and payroll settings that a business enters to estimate wages. We don't collect bank account details or tax file numbers. |
| Business records | Locations, checklists and who ticked each task, stock levels, suppliers and their contact details, purchase orders, the business logo. |
| Activity records | A change log of who changed what and when within the business's account. |
| Location (optional) | If a staff member's device shares it when clocking in or out, approximate coordinates may be recorded with that punch. |
| Technical information | Sign-in cookies, IP address, browser and device type, and server logs used to keep the service secure and working. |
| Your messages | What you tell us when you email us, book a call or ask us to set up your account. |
4. How we use it
- To provide CrewConnect: rosters, time clock, timesheets, payroll summaries, checklists, stock and purchase orders.
- To send emails the service needs — for example sign-in links, password resets, and purchase orders a business sends to its suppliers.
- To set up your account and give you support, when you ask us to.
- To keep CrewConnect secure, prevent misuse, and fix problems.
- To bill for paid plans and meet our legal obligations.
We don't sell personal information, and we don't use it for advertising.
5. Where it's stored, and who helps us
CrewConnect's database, sign-in and file storage are hosted by Supabase in Sydney, Australia. We use a small number of providers to run the service:
- Supabase — database, sign-in and file storage (Sydney, Australia).
- Vercel — hosting for the app and this website. The app runs in Sydney; pages may be delivered through Vercel's worldwide network.
- Resend — sending emails, such as sign-in emails and purchase orders. Email content and addresses pass through Resend's servers, which may be outside Australia (including the United States).
- Google Fonts — this website loads its typeface from Google, which receives your browser's IP address.
We only share personal information with these providers to run CrewConnect, and we take reasonable steps to ensure they protect it. We may also disclose information if the law requires it.
6. Cookies and browser storage
CrewConnect uses cookies to keep you signed in and to remember which location you're working with. It also stores a few display preferences in your browser (for example, the stock category you last opened). We don't use advertising or tracking cookies, and this website doesn't use analytics.
7. How long we keep it
We keep a business's information for as long as its account is open, so that its timesheets, change log and records stay complete. If a business closes its account, we delete or de-identify its information within 90 days, unless we must keep something longer by law. A business can ask us to delete specific information sooner.
8. Keeping it safe
Information is encrypted in transit, access is limited by role within each business, and only authorised RooWorks staff can access systems, when needed to support you. Each business's data is kept separate from other businesses'. No system is perfectly secure, but if a data breach is likely to cause serious harm, we'll tell the affected business and people, and the Office of the Australian Information Commissioner, as required by law.
9. Access and correction
Staff can update their own name, phone and photo in CrewConnect, and should ask their employer about other details. Anyone can ask us for access to, or correction of, personal information we hold about them by emailing hello@rooworks.app. Where the information belongs to a business customer's account, we may refer the request to that business.
10. Complaints
If you have a concern about how we've handled personal information, email hello@rooworks.app and we'll respond within one business day and aim to resolve it within 30 days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
11. Changes
We may update this policy as CrewConnect changes. We'll post the new version here with its date, and tell business customers about significant changes by email.
12. Contact
RooWorks Pty Ltd · New South Wales, Australia · hello@rooworks.app