Privacy policy

What RosterFast is

RosterFast is scheduling software for residency programs. Programs (organizations) use it to build and share staff schedules.

What we store

Account data of the people who sign in: name, email and, if you use Google, your Google profile name and picture.

Program data that admins enter: residents' names and optional emails, roles, qualifications, availability and absences (type and dates), shifts, rules and schedules.

We never ask for or store patient data. RosterFast holds no protected health information.

How we use it

Only to provide the service: generate, check, store and share schedules, send account emails (sign-up, password reset, invitations) and keep the service secure. We don't sell data or use it for advertising.

Shared links

When an admin publishes a schedule and creates a link, anyone with that link (and its PIN, if set) can see the published schedule. Absence types are never shown on shared links. Links can be revoked at any time.

Where data lives

Data is stored in the United States with our infrastructure providers (Supabase for the database and sign-in, Amazon Web Services for computing and email, Vercel for hosting). Data is encrypted in transit and at rest.

The free checker

The ACGME duty-hour checker runs entirely in your browser. The file you check is not uploaded to our servers.

Your rights

Admins can edit or delete people and schedules, and owners can delete the whole organization. For any other request (access, correction, deletion of your account), write to support@rosterfast.com.

Changes

If this policy changes in a way that matters, we'll tell program owners by email before it applies.