Privacy Policy

What autoroster is

autoroster is a personal productivity tool that reads screenshots of shift-worker rosters and creates events in your Google Calendar or Apple iCloud Calendar. It is a private, invite-only application.

What data we collect

• Account identity — your name, email address, and profile picture, obtained from Google or Apple at sign-in and stored only for the duration of your session.
• Roster images — screenshots you upload are sent to the Anthropic API for shift extraction. They are processed in memory and deleted immediately after parsing. They are never stored on disk or in a database.
• Calendar credentials — Google OAuth tokens and Apple app-specific passwords are stored in an encrypted, server-side session cookie and used solely to write events to your calendar. They are never logged or shared.

What data we do not collect

• We do not store your roster images or extracted shift data after your session ends.
• We do not use analytics, advertising trackers, or third-party cookies.
• We do not sell or share your data with any third party beyond the services listed below.

Third-party services

• Anthropic API — your roster image is sent to Anthropic to extract shift data. Anthropic's data handling is governed by the Anthropic Privacy Policy.
• Google — if you sign in with Google, Google's OAuth and Calendar APIs are used. See the Google Privacy Policy.
• Apple / iCloud — if you sign in with Apple, Apple's Sign In service and iCloud CalDAV are used. See the Apple Privacy Policy.
• Vercel — the application is hosted on Vercel. See the Vercel Privacy Policy.

Session cookies

autoroster uses a single, signed session cookie to maintain your login state and temporarily hold the events you are about to add to your calendar. This cookie is essential for the application to function and is not used for tracking. It expires when you sign out or close your browser session.

Your rights

You may sign out at any time, which clears your session and all associated data held in it. Because autoroster does not retain personal data beyond your active session, there is nothing further to delete or export. You can revoke Google Calendar access at any time via your Google Account security settings.

Contact

This is a private application operated by Jeremy Roberts. Questions about this policy can be sent to jeremy.e.roberts@gmail.com.