Half an hour with someone from our team, using your own roster rather than a demo one.
The hours you approved go over to payroll without anyone retyping them.
The short version, before the long one: we collect what the app needs to run your roster and your payroll, we keep it in your account, and we do not sell it to anybody.
Zon Staff runs either as an app installed on your Shopify store or as an account of its own on the dashboard at manage.zonstaff.com. Where a Shopify store is connected, we work with the data that store already holds. Either way we hold what you and your team record while you work.
We use your data to run the product you installed and nothing else. That means building rosters, recording hours, calculating payroll and commission, producing reports, sending shift notifications, and keeping an audit trail of who changed what.
We also use aggregated and de identified technical data to keep the service reliable and to find bugs. We do not sell personal data and we do not use it to train advertising models.
We share data only with the processors needed to deliver the service, and only what each one needs:
The current list of processors, what each one does and where it holds data is on the security page. We do not sell personal data to anybody, and we do not share it for advertising.
Selfie attendance is optional and off until a store owner switches it on. When it is on, a photo is captured at the moment of a clock in and stored against that single time record.
Photos are visible only to managers you have granted permission to. They are never used for facial recognition, never shared outside your store, and are deleted with the time record they belong to. If you switch the feature off, existing photos can be purged from your settings.
Active data is kept for as long as your account is open, or for as long as the app is installed on your Shopify store. When you close the account or uninstall, we retain your records for 30 days so that coming back does not lose your history, then delete them. Payroll records may be retained longer where local law requires it, and anything we keep beyond that point is aggregated or anonymised.
Depending on where you live you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Store owners can export timesheets, payroll history and staff records to CSV from the app at any time.
Staff members should contact their employer first, since the store owner is the controller of their employment data and we act as the processor. If that is not possible, write to us directly.
Where the GDPR or the UK GDPR applies, the store owner is the controller of their staff data and Zon Staff acts as the processor. We process personal data only on documented instructions from the controller, we require confidentiality from everyone with access to it, and we assist with data subject requests. A data processing agreement covering these terms, including the standard contractual clauses for transfers outside the EEA and the United Kingdom, is available on request from support@zonstaff.com.
Under the CCPA, we do not sell or share personal information as those terms are defined in the Act, and we have not done so in the preceding twelve months. California residents may exercise their rights of access, deletion and correction through the same address, and we will not discriminate against anyone who does.
Data is processed on infrastructure in the United States. The security page sets out how it is encrypted, who inside the company can reach it, and how long backups are kept.
Questions about this policy, or a request about your data, can go to support@zonstaff.com or Zon Staff, Fort Worth, TX, United States. We answer data requests within 30 days.
