01Admins sign in; project roles matter
The app uses individual administrator accounts, project assignments and sign-in verification. Roster review and publishing are part of the signed-in project workflow, not actions available through the public demo.
02Worker links are not individual logins
A person with a project’s roster link or QR code can search its published roster by name without a worker account. Treat the link and results as shareable with anyone who receives it; do not publish information that requires worker-only authentication.
03The workbook is your responsibility
Uploads can contain names, employment numbers, employers, locations, dates and shift codes. Administrators must have authority to provide these records, check the proposed version and avoid importing unnecessary personal details.
04Custom status text is data too
Unfamiliar daily labels can be preserved rather than omitted. Inspect them for medical details, private notes or other information unsuitable for a shareable worker view. Blank mappings do not redact text; use a deliberate source-cell correction or correct the workbook, refresh and inspect the result.
05Optional mapping assistance has a separate boundary
AI mapping assistance is disabled by default and is not used by the public demo. When configured for the signed-in app, only a locally anonymised structural sample from the first 40 rows and 40 columns is submitted to OpenAI, not the raw workbook. Administrators still check the mapping and publication.
06Public demo stays separate
The public demo runs the actual CSV/XLSX importer and review without connecting to a live tenant, account or publication. It starts with fictional records. If you choose a file, it is uploaded to separate private temporary storage; use only non-sensitive test data. Publishing is disabled.
07Review the full policy
See the Privacy Policy for information about original uploads, published versions, offline copies, retention and requests to correct information. Contact us if your operation needs a specific hosting or procurement detail confirmed before uploading data.