Golden Pond Investments Inc. ("we", "us", or "our") operates RosterHelp, a volunteer operations and scheduling platform available at app.rosterhelp.com and marketed at www.rosterhelp.com. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it. By using RosterHelp, you agree to the practices described here.

1. Information We Collect

We collect information in the following ways:

• Account information. When you register, we collect your name and email address through our authentication provider, Clerk. We do not store passwords — authentication is handled entirely by Clerk.
• Organization and volunteer data. Coordinators and administrators enter volunteer profiles, contact details, availability, qualifications, training records, shift assignments, and hours on behalf of their organizations. This data is stored in our database and is accessible only to authorized users within the same organization.
• Usage data. We collect access logs, IP addresses, browser type, and session activity for security monitoring, troubleshooting, and product improvement.
• Communications. When emails are sent through the platform (shift notifications, announcements, badge certificates), we retain a record of those communications for audit purposes.

2. How We Use Your Information

• To create and manage your account and organization.
• To provide shift scheduling, volunteer management, and all other platform features.
• To send transactional emails on behalf of your organization via our email provider, Resend.
• To authenticate users securely via Clerk.
• To detect and prevent fraud, abuse, and security incidents.
• To improve the platform based on aggregated, anonymized usage patterns.

We do not use your data for advertising, and we do not sell or rent personal information to third parties.

3. Third-Party Service Providers

We share data with the following sub-processors solely to operate the platform:

• Clerk — user authentication and identity management.
• Resend — transactional email delivery.
• Replit — cloud infrastructure, hosting, and database storage.

Each provider is contractually bound to process data only as directed by us and to maintain appropriate security standards.

4. Data Isolation and Security

Each organization's data is fully isolated. Users from one organization cannot access data belonging to another. All data is stored in an encrypted PostgreSQL database. Access requires authenticated sessions. Administrative actions are recorded in an audit log. We conduct regular reviews of our security practices.

5. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, we retain your data for 30 days to allow reactivation or export, after which it is permanently deleted upon request. You may request deletion of your data at any time by contacting us.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your data.
• Export your data in a portable format (CSV exports are available directly within the platform).
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at the address below.

7. Cookies

RosterHelp uses session cookies required for authentication and platform operation. We do not use advertising cookies or third-party tracking pixels. You may disable cookies in your browser, but doing so will prevent you from logging in.

8. Children's Privacy

RosterHelp is not directed at children under 16 years of age. We do not knowingly collect personal information from children. If you believe a child's data has been submitted, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Continued use of RosterHelp after changes are posted constitutes your acceptance of the updated policy.