Privacy (draft)

Last updated: November 2026.

Who is responsible

The employer (the business that uses CrewDeck) decides what information about its employees is entered and why. CrewDeck stores and processes that information on the employer's behalf to run the service. Employers are responsible for telling their employees what is collected, including the optional location check.

What CrewDeck stores

• Accounts. Your email address. Passwords are handled by Amazon Cognito; CrewDeck never sees them.
• Employee records entered by the employer. Names, email, phone, positions, locations, availability, time-off requests, and pay rates.
• Schedules and time records. Shifts, clock-in and clock-out times, whether a punch came from a phone, a shared device or a manager, and the reason for any correction. Corrections keep the original record.
• Location check (optional, set by the employer). When on, a phone's location is read once at the moment of clocking in or out. Only the distance from the workplace and whether it was within range are kept, not the coordinates, and nothing is tracked in the background.
• Activity log. A record of important changes, such as who published a schedule or changed a pay rate, and when.
• Notifications and email. Invitations, schedule changes and request decisions. Emails never include pay information.

Cookies and browser storage

CrewDeck does not use advertising cookies or analytics. While you are signed in, your browser keeps a sign-in token in session storage, which is cleared when you close the tab. It also remembers your theme choice, and a shared in-store device remembers its device code, in local storage.

Where information is kept and who can see it

Information is hosted in Canada on Amazon Web Services (Canada Central region). People at the employer can see only what their role allows, and managers see only their own locations. Pay rates are visible only to people the employer allows. CrewDeck's operator may access data only to run and support the service. Sharing with service providers is limited to Amazon Web Services for hosting, sign-in and email delivery. CrewDeck does not sell personal information.

Keeping and deleting information

To be confirmed. Retention periods for employee, time and pay records, and how deletion requests are handled, are being decided with professional advice, because employers may be required to keep some records for a set time.

Your choices

Ask your employer first about your own records. You can also contact CrewDeck at crewdeck@anriwial.com to ask for access to or correction of information, or with any privacy question.

Laws

To be confirmed. CrewDeck is being built for Ontario businesses and aims to follow Canadian privacy law. The exact obligations and wording will be confirmed with legal counsel.