Privacy Policy

Last updated 1 October 2026

Shine Roster is operated by [YOUR LEGAL BUSINESS NAME], ABN [YOUR ABN], Queensland, Australia ("we", "us"). Contact us at [email protected].

This policy explains how we handle personal information in line with the Australian Privacy Principles.

What we collect

• Account details: names, email addresses and passwords (stored encrypted) for office managers, and usernames for cleaners.
• Business records you enter: jobs, customer names, addresses and phone numbers, prices and payments, cleaner details including home suburb, ABN and bank account details, photos, expenses and bank statement lines you upload.
• Billing details: your subscription and invoices. Card details are collected and stored by Stripe, not by us.
• Technical information: basic logs such as IP address and browser type, used to keep the service secure.

Why we use it

To provide and support Shine Roster, bill your subscription, keep accounts secure, and contact you about your account. We don't sell personal information and we don't use your business records for advertising.

Who we share it with

We use trusted providers to run the service: Supabase (database and file storage), Cloudflare (hosting), Stripe (payments), Resend (sending emails to your customers) and Anthropic (the chat assistants). When you use a chat assistant, your question is sent to Anthropic to write the answer. For office managers, a short summary of your upcoming jobs and unpaid balances is sent too, so it can answer questions about them. We only keep a count of chat messages, not what was said. These providers may store data outside Australia, including in the United States. We'll also disclose information if the law requires it.

Information about your customers and staff

For the records you enter about your own customers and staff, your business decides what is collected and why; we store and process it on your behalf. Please make sure your own privacy notices cover this.

Security

Each business's records are separated at the database level, connections are encrypted, and access within your business depends on each person's role. No system is perfectly secure, so please use strong passwords and remove access for people who leave.

Keeping and deleting data

We keep your records while your account is open. After it closes we keep them for up to 90 days so you can come back or ask for an export, then delete them, except where we must keep billing records by law.

Access, correction and complaints

You can ask to see or correct your personal information, or make a privacy complaint, by emailing [email protected]. We'll reply within 30 days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).