Effective date: 24 May 2026
NJROSTER ("we", "us", "our") operates the website at njroster.com (the "Service"). We are the data controller for personal data processed via the Service.
Contact: sachwarah@gmail.com
The Service is intended for adult employees with an eligible work email domain. We do not knowingly process children's data.
We do not sell your data. We may share data:
When you share your roster, other users may only see that you are off, not the specific absence reason (e.g. sickness, family assistance, or other absence categories).
| Provider | Purpose | Region |
|---|---|---|
| Heroku | Application hosting and platform | EU |
| Heroku Postgres | Database | EU |
| Mailgun | Inbound and outbound email | EU |
| Sentry | Error and event monitoring (operational log metadata only — no email addresses or roster content) | US (SCCs) |
| Papertrail | Log retention and search (operational logs) | US (SCCs) |
Our primary database and application servers are hosted in the EU (Heroku EU region). Operational log data — application events and errors — is processed by Sentry and Papertrail, both US-based processors, under Standard Contractual Clauses (SCCs). These logs contain operational identifiers (user IDs) but not email addresses or roster content.
We retain personal data only as long as necessary for the purpose it was collected:
| Data | Retention period |
|---|---|
| Roster schedule lines | 365 days, purged automatically by a daily scheduled process |
| User account | Until you delete it, or automatically after 365 days of inactivity (no roster uploads) |
| In-app notifications | Read notifications: 90 days. Unread notifications: 365 days |
| Group membership | Until you leave the group or your account is deleted |
| Session data | Expired sessions are deleted daily |
| Audit and security logs | Standard events (group actions, settings changes): 2 years. Security events (account deletion, login failures, password resets): 5 years |
You can create groups to share rosters with colleagues. When you join a group, your name and roster (subject to your visibility settings) may be visible to other active members.
If you delete your account and you are the sole admin of a group, the longest-standing active member is automatically promoted to admin so the group can continue. If you are the only member, the group is dissolved. You can review and manage your groups before deleting your account.
You can leave a group at any time from the group's page.
If you are in the UK/EEA, you have rights to access, correct, delete, restrict, or object to processing, and to data portability. You may withdraw consent for sharing at any time by setting your roster visibility to Private. To exercise other rights, contact us at sachwarah@gmail.com.
You can also download a copy of your data or permanently delete your account from the My Data page in your account settings.
We only use essential cookies required for the Service to function:
These cookies are strictly necessary. We do not use analytics, advertising, or tracking cookies. No cookie consent banner is required.
We use reasonable technical and organisational measures to protect your data. No system is 100% secure, but we work to safeguard your information.
Calendar subscriptions are accessed via a unique tokenised link. Treat this link as sensitive and do not share it publicly. If you believe your link has been compromised, you can regenerate it from your account settings.
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
We may update this policy from time to time. We will post the updated policy on the site and update the effective date. If changes are material, we will notify registered users via in-app notification.
For questions, contact sachwarah@gmail.com. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, or your local EU supervisory authority.