ROSTR - Reliable Operational Shift & Time Roster

Last updated: June 19, 2026

This Privacy Policy describes how ROSTR ("we", "us", or "our") collects, uses, and shares your information when you use our calendar synchronization service.

1. Information We Collect

We collect information you provide directly to us, including:

Account Profile Information: When you sign in using Google Sign-In, we receive your email address, name, and profile picture URL.
Shift Roster Details: The dates, shift types, start times, end times, and specific hospital/work locations you enter on our calendar interface.
Calendar Metadata: Information necessary to coordinate calendar events, such as event identifiers and timestamps.

2. Google API Services User Data Policy (Limited Use)

ROSTR's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we request access to the https://www.googleapis.com/auth/calendar scope to create, modify, and delete the calendar entries representing the shifts you add or import within ROSTR.

We only create and manage events representing your work shifts.
We do not read, view, parse, or store unrelated personal calendar events or schedules.
We do not transfer or share your Google user data with any third parties, except as strictly necessary to write events to the Google Calendar API on your behalf.
Your Google user data is never used for serving advertisements, or for training machine learning or artificial intelligence models.

3. How We Use Your Information

We use the collected information for the following purposes:

To create and authenticate your account.
To sync your operational shift patterns directly to your primary Google Calendar.
To display your personal roster within the application interface.
To maintain, troubleshoot, and optimize the calendar sync engine.

4. Data Storage and Security

We implement appropriate physical, technical, and administrative security standards to safeguard your database records and OAuth credentials. OAuth access tokens and credentials are encrypted during transmission and stored securely in our database. We retain your data only for as long as your account remains active.

5. Your Controls and Account Deletion

You can disconnect your Google Calendar link or delete your account and all associated shift data at any time. To remove ROSTR's access permissions to your Google account completely, you can revoke access via the Google Security Permissions Console.

6. Contact Us

If you have any questions or concerns about this Privacy Policy or our handling of Google Calendar user data, please reach out to us.