Privacy

What is stored

For each person who works for you: their name, role, nationality, date of birth, phone, address, emergency contact, what they are paid, and the records of payments, advances, loans, leave and documents you enter.

Documents you upload, such as a passport or permit page, are stored privately and can only be opened by an admin of that household or by the person themselves.

For each admin: name, email address, and the record of what they changed.

Who can read it

The admins of your household, and each worker for their own record only. Nobody else.

The separation is enforced by the database itself, not only by the screens. A second household asking for your rows gets nothing back.

What the person running the service can see

Counts and account details: how many households exist, how many admins and workers each has, when it was created, the email of the owner, and how much storage is used.

They cannot read any household workers, salaries, payments, documents, signatures or requests. There is no policy in the database that would let them, so it is not a promise about behaviour: the query returns nothing.

There is no support access to your records, even with your permission.

Where it is kept, and for how long

The records and files are held by Supabase, and the app runs on Vercel. Email, when you switch it on, is sent through Resend.

Records stay until you delete them. A deleted household is exported, then kept for thirty days, then purged.

Asking about your data

If you want to see, correct or remove what is held about you, ask the admin of the household you work for. They can export everything and delete records from inside the app.