Privacy Policy

Last updated: September 15, 2026

1. Introduction

ElizzeTech ("we", "us", or "our") operates RotaZen ("the Service"), a shift scheduling and workforce management platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

Account information: name, email address, and password (encrypted). When you register, we collect the email address you use to sign up.

Company information: company name, number of employees, locations, and subscription details you provide when setting up your workspace.

Scheduling data: shifts, templates, employee names, locations, and request records you create while using the Service.

Usage data: information about how you interact with the Service, including device type, browser, pages visited, and timestamps. This is collected automatically through cookies and analytics tools.

3. How We Use Your Information

To provide, operate, and maintain the Service, including displaying your schedules and managing your team data.

To process subscription payments and manage your billing cycle through our payment processor, Stripe.

To send you service-related communications, such as trial expiration reminders and important policy updates.

To improve the Service, develop new features, and troubleshoot issues.

To comply with legal obligations and enforce our Terms of Service.

4. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

Performance of a contract: processing necessary to provide the Service you signed up for.

Consent: for analytics, marketing communications, and non-essential cookies. You can withdraw consent at any time.

Legal obligation: to comply with tax, accounting, and regulatory requirements.

Legitimate interests: to improve our Service, ensure security, and prevent fraud.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share information with:

Service providers: Stripe (payment processing), cloud hosting providers, and analytics tools — all bound by data processing agreements.

Legal authorities: when required by law, court order, or to protect our rights and safety.

Business transfers: in the event of a merger, acquisition, or asset sale, your data may be transferred subject to confidentiality obligations.

6. Data Retention

We retain your data for as long as your account is active. After account deletion, we retain scheduling data for 30 days to allow for recovery, after which it is permanently deleted.

Billing records are retained for the period required by applicable tax law (typically 7 years).

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of access: request a copy of your personal data.

Right to rectification: correct inaccurate or incomplete data.

Right to erasure: request deletion of your data ("right to be forgotten").

Right to restrict processing: limit how we use your data.

Right to data portability: receive your data in a structured, machine-readable format.

Right to object: object to processing based on legitimate interests.

Right to withdraw consent: withdraw consent for processing based on consent at any time.

To exercise these rights, contact us at support@ElizzeTech.app.

8. International Data Transfers

Your data may be processed in countries outside the European Economic Area. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data in accordance with GDPR requirements.

9. Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure.

10. Cookies

We use cookies and similar technologies to operate the Service and improve user experience. See our Cookie Policy for details on the types of cookies we use and how to manage them.

11. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "last updated" date. We encourage you to review this page periodically.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, contact us at:

ElizzeTech — support@ElizzeTech.app