Legal
Customer Data & Data Processing
Version 1.0 · Effective 12 September 2026 · Last updated 12 September 2026
This page explains, in plain English, how Customer Data is handled in Rostrix. It complements the Privacy Policy and Terms of Service.
Overview
- Businesses upload and manage their business and workforce data in Rostrix.
- Rostrix provides the software platform.
- Customers retain ownership of their Customer Data.
- Rostrix processes Customer Data to provide the Services.
- Rostrix uses appropriate security controls for a SaaS product of this type.
- Rostrix uses selected service providers to operate the platform.
- Rostrix may process data to maintain security, prevent abuse, troubleshoot problems and comply with law.
- Customers remain responsible for appropriate collection and use of employee information.
Your business data remains your business data.
Roles of the parties
The Customer decides what information to enter into its Rostrix organisation and how features are configured for its workplace.
Rostrix provides the application, infrastructure integrations and access controls needed to operate the workspace.
Employee information
Employers may store employee information in Rostrix including workforce, attendance, leave and related information such as name, contact details, address, emergency contacts, roster data, timesheets, pay rate/salary where entered, documents and profile photos.
Rostrix is not designed to collect TFNs, bank details, superannuation details or dates of birth as core fields.
Location information
Where location-based timekeeping is enabled, Rostrix may capture location at clock-in and clock-out.
Rostrix does not continuously track employee location.
Employee documents
Employee and related workplace documents uploaded by the Customer are stored using Cloudflare R2.
Access is restricted to authorised users of the relevant organisation according to authentication, membership and permission checks.
Security and providers
See the Security page for controls and the Subprocessors page for service providers. Payment card processing is handled by Stripe; Rostrix stores subscription identifiers rather than full card credentials.
Privacy and deletion requests
Customers and users can request privacy assistance, export or organisation deletion through Settings → Legal & Privacy or by emailing admin@rostrix.app.
Questions? admin@rostrix.app · Contact
