Privacy Policy

01.Information We Collect

When you interact with RoRoster, create a workspace, or connect your staff roster, we collect only the minimum data required to deliver real-time group shift telemetry and rank automation:

02.How We Use Collected Information

The data collected by RoRoster is utilized strictly for service fulfillment and operational synchronization:

• Calculating weekly staff shift quotas, duty performance, and attendance records.
• Executing automated group rank promotions and demotions via Roblox Open Cloud API keys configured by authorized workspace owners.
• Broadcasting scheduled training, patrol, and shift embeds to connected Discord community channels.
• Generating permanent security audit logs of all staff managerial actions, notices, and leave approvals.
• Preventing malicious abuse, unauthorized access, and automated botting attempts.

03.Data Security & Encryption Standards

We employ strict industry-standard security measures to safeguard your group operations data:

• Encryption in Transit: All HTTP traffic is protected by Transport Layer Security (TLS 1.3) with modern cipher suites.
• Encryption at Rest: Roblox Open Cloud API keys, Discord webhook tokens, and sensitive workspace configurations are encrypted using AES-256-GCM.
• Access Isolation: Workspace databases are logically isolated; no workspace owner or administrator can view or modify telemetry from other groups.

04.COPPA & Children's Privacy Compliance

Because RoRoster integrates with Roblox experiences that may engage younger audiences, we maintain strict adherence to the United States Children's Online Privacy Protection Act (COPPA), the EU GDPR, and the UK Age-Appropriate Design Code:

• We do not knowingly collect, request, or store personally identifiable information (PII)—such as real legal names, physical addresses, or phone numbers—from children under 13.
• All staff identification on RoRoster relies on pseudonymous public Roblox User IDs and Discord usernames.
• If we discover that a user under 13 has submitted personal contact information without verifiable parental consent, we will promptly delete that data from our production clusters.

05.Data Retention & Right to Erasure

We retain shift logs and audit records only for the duration needed to fulfill workspace requirements. Workspace owners and individual users possess the following rights:

• Right to Access & Export: Request a complete JSON export of all shift records and profile mappings associated with your workspace.
• Right to Erasure (Deletion): Workspace owners may request the permanent deletion of their workspace database and telemetry history at any time. Upon request, all associated records are permanently purged within 30 days.

06.Third-Party Services

RoRoster interfaces with the following trusted third-party services to deliver core capabilities:

• Roblox Corporation: Open Cloud APIs and OAuth 2.0 authentication. Subject to the Roblox Terms of Use.
• Discord Inc.: OAuth 2.0 user verification and notification webhooks. Subject to the Discord Terms of Service.