1.Data We Collect
- Contact data: employee name, phone number (WhatsApp), email (if provided).
- Employment data: branch assignment, role, availability, scheduled shifts, shift confirmations.
- National ID (Teudat Zehut): collected during onboarding for the sole purpose of statutory payroll reporting. We do not use it for any other purpose.
- WhatsApp messages: messages you send to the Service's WhatsApp number, and our automated replies, for the purpose of shift management.
- Technical data: message timestamps and delivery status.
2.How We Use Your Data
- To build and communicate work schedules.
- To let you view your shifts, submit availability, confirm shifts, and request swaps.
- To send shift-related notifications (schedule published, changes, reminders).
- For payroll traceability and legal compliance (working-hours records).
- To report employee identity (national ID, name) and working hours to your employer's payroll provider, for statutory wage processing.
3.WhatsApp / Meta
The Service communicates via the WhatsApp Business Platform provided by Meta Platforms, Inc. Messages are processed through Meta's infrastructure subject to Meta's WhatsApp Business Policy. We exchange only the data necessary to deliver and receive your scheduling messages.
4.Data Sharing
Your data is visible to authorized managers within your own organization (tenant) only. Each organization's data is isolated. We share data with third parties only: (a) Meta, to deliver WhatsApp messages; (b) your employer's payroll provider, to process wages and meet statutory reporting obligations (this may include your national ID, name, and working hours); (c) where required by law.
5.Data Retention
We retain scheduling and message records for as long as your organization uses the Service, plus the period required by Israeli labor and tax law for workforce records. Records are deactivated (soft-deleted) rather than immediately erased, to preserve payroll and audit history. You may request earlier deletion (see §7).
6.Data Security
Data is stored in a secured PostgreSQL database with tenant isolation. Access requires authentication. Secrets are managed outside source code.
7.Your Rights
Under the Israeli Privacy Protection Law, 5741-1981 (and Amendment 13), you may request to access, correct, or delete your personal data. To exercise these rights, contact us at the address below.