raidandev

Privacy Policy

Last updated 28 September 2026

This policy explains what raidandev (“we”) collects through get.raidandev.org and the Portal application, why, and who else handles it.

Two kinds of data

Your account — the business owner's name, email and business details. We are responsible for this data.

Your staff records — everything your business enters about its employees. We hold and process this on your behalf, under your instructions. If an employee wants to see, correct or delete their records, they should ask their employer; we will help the employer respond.

What we collect

• Account details — name, work email, business name, locations.
• Staff records — names, contact details, roles, schedules, time off, time-clock entries, messages, incident reports, and photos or videos staff upload.
• Time-clock location — if the business turns on the GPS time clock, the device's location is recorded at the moment a staff member clocks in or out: the coordinates, their accuracy, the distance from the workplace and whether it was inside the allowed boundary. Location is not tracked at any other time.
• Payment details — handled entirely by Stripe. We never see or store your card number; we keep a record of the order and plan.
• Server logs — like any web server, ours record IP addresses, browser type and the pages requested. We use them only for security and troubleshooting (for example, blocking attacks), and they are deleted after 14 days.
• Page-view counts — a count of which pages are opened on our sites. It stores no IP address and builds no profile, respects Do Not Track, and you can switch it off from the notice shown on the page.

Cookies

We use no advertising or third-party tracking cookies. The only cookies are one that remembers your answer to the page-count notice (kept for a year), and what the application needs to keep you signed in.

What we do with it

We use it to provide the service you pay for, keep it secure, and contact you about your account. We do not sell personal data, share it for advertising, or use your staff records for any purpose of our own.

Who else handles it

The application and its database run on a server we operate. A few outside services handle specific jobs:

• Stripe — payment processing and billing.
• Resend — delivers the emails the service sends (welcome, password reset, notifications). It receives the recipient's address and the message.
• Push notification services (Apple, Google, Mozilla) — if a user turns on notifications, their browser's push service delivers them. The service provider sees the notification, not the rest of your data.
• Product lookup — when a user looks up a product by name, the product name is sent to public search services (Wikidata, and Google or DuckDuckGo) to find a match. No personal data is sent.

We will disclose data if the law requires it, and will tell you first unless we are legally prevented from doing so.

Security

All traffic is encrypted in transit (HTTPS). Passwords are stored only as salted hashes, every business's data is kept separate from every other's, and access to the server and its backups is restricted. No system is perfectly secure; if a breach affects your data we will tell you promptly.

Retention

We keep your data while your subscription is active and for 30 days after it ends, then delete it from the live service. Backups are overwritten on a rolling schedule, so deleted data is gone from them within 12 months. Server logs are kept for 14 days.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, or ask what we hold about you. Email us and we will respond within 30 days. Depending on where you live you may have further rights, including to complain to a data protection authority.

Job applicants

Businesses that use Portal can publish a job page and receive applications through it. If you apply for a job this way:

What we collect. Your name, the email address and/or phone number you give, the job you applied for, the times you said you can work, your message, and a resume if you attach one (a PDF or a photo), plus the date and time you applied. We do not ask for, and you should not send, sensitive information such as your date of birth, government ID numbers or health information.

Who sees it. Only the business you applied to: its owners and the managers it allows to handle hiring. The business decides whether to contact you. We process your application on the business’s behalf as its service provider; we do not use it for anything else, do not sell or share it, and do not show it to other businesses.

How it is protected. Your name, contact details, message and the business’s notes about you are stored encrypted. Your resume can only be downloaded by the business’s hiring staff.

How long we keep it. Applications are deleted automatically after a period the business chooses (between 30 days and 2 years; 180 days by default), counted from when the job closes or, if the job is still open, from when you applied. The business can delete an application sooner. Deleted data is gone from our backups within 12 months. If the business hires you, the details you enter when you create your employee account are covered by the rest of this policy.

Analytics. Public job pages do not load our page-view analytics.

Your choices. You can ask the business you applied to, or us at raidandevorg@gmail.com, to see, correct or delete your application; we respond within 30 days. Depending on where you live (for example, California) you may have further rights to know, correct and delete your information; we honour them the same way. We do not sell or share it.

Spam protection. To stop abuse, we limit how many applications can be sent from one connection and to one business per day. Server logs (including IP addresses) are kept for 14 days, as described above.

Children

The service is for businesses and is not directed at children under 13.

Changes

If we change this policy in a way that matters, we will email account owners before it takes effect.

Contact

Questions about this document: raidandevorg@gmail.com