Privacy Policy

This policy applies to the Muster application and website operated by Muster ("we", "us"), based in Queensland, Australia. It covers both the businesses who subscribe to Muster (our customers) and the staff members those businesses add to the service.

1. Who is responsible for your information

When a business uses Muster to manage its staff, that business decides what information goes into the service and how it is used. We host and process that information on their behalf.

If you are a staff member and want your information changed or removed, contact your employer first — they control your record. You can also contact us using the details at the end of this policy.

2. What we collect

Account information

• Your name and email address
• An encrypted (hashed) version of your password — we never see or store your actual password
• A profile photo, if you choose to upload one
• Your role (admin or employee) and which business you belong to
• Your language preference, and whether you want alert emails
• If your workplace uses a shared clock-in tablet, a four-digit PIN (stored encrypted)

Rostering and work information

• The days and times you have said you are available to work
• Shifts you have been assigned, and any job types or roles attached to them
• Clock in and clock out times you record
• Shift swap requests and cancellations, including any note you add
• Leave requests, including the dates and any note you add
• Where your employer has entered it, your base hourly pay rate, modern award classification and employment type (full-time, part-time or casual)

Billing information (business owners only)

When a business subscribes, payment is handled by Stripe. We receive the business name, billing email, subscription status and renewal dates. We never see or store your full card number.

Messages you send us

If you use our contact form, we receive the name, email, phone number, business name and message you enter, so we can reply.

Technical information

• Standard server logs kept by our hosting providers, which may include IP addresses and browser information, used for security and diagnosing faults
• A small amount of data stored in your browser to keep you signed in and remember your light or dark theme preference

Website visit statistics

When you visit our public website (the homepage, contact, sign-in, terms and privacy pages), we record which pages you view, how long you spend on them, the website or ad campaign that sent you, your device type, browser, approximate country and time zone, and whether you went on to create an account or send us a message. To tell repeat visits apart, a random ID is kept in your browser's local storage. We don't use cookies for this, we don't store your IP address, and we don't link these statistics to your name or email. They are kept in our own database in Sydney, are never shared, and are deleted after 24 months.

If your browser sends a Do Not Track or Global Privacy Control signal, we don't record your visit at all. You can also clear your browser's site data at any time to reset the random ID.

We do not use advertising trackers, advertising cookies or third-party analytics, and we do not sell personal information to anyone. If we ever add an advertising or measurement tag from another company, we will update this policy and ask for your consent first.

3. Why we collect it

• To provide the service — building rosters, recording hours and producing pay summaries
• To authenticate you and keep accounts secure
• To notify you about shifts, swaps and cancellations relevant to you
• To support you when you contact us, and to fix faults
• To meet legal obligations, including record-keeping expectations that apply to employment records

4. Where your information is stored, and who helps us run Muster

Muster runs on Supabase, which hosts our database and file storage on Amazon Web Services infrastructure. Our database is located in the ap-southeast-2 region (Sydney, Australia). Personal information you enter into Muster is stored in Australia.

We protect it with encryption in transit and access controls that prevent one business from seeing another business's data.

A small number of service providers handle some information for us. Some of them are based overseas, so some information leaves Australia when they do their part:

• Cloudflare serves our website. It runs a global network and may process technical request information (such as IP addresses) outside Australia to route traffic and protect against attacks.
• Resend (United States) sends our emails, including shift alerts, trial reminders and replies to contact messages. It receives the recipient's name, email address and the content of the email.
• Stripe (United States and other countries) processes subscription payments for business owners. It receives billing and payment details. Staff information is never sent to Stripe.
• Google Fonts and unpkg supply the typefaces and a software library our pages load. Your browser contacts them directly, so they receive your IP address and browser details, but no account or rostering information.

Your roster, availability, hours, pay rates and leave records are stored only in our Sydney database. We choose providers that protect personal information to a standard comparable to the Australian Privacy Principles.

5. Who can see your information

• Your employer's administrators can see your name, availability, shifts, clock records and pay rate for their business.
• Other staff at your business can see your name, photo and the shifts you are rostered on, so they can arrange swaps. They cannot see your pay rate.
• Other businesses cannot see your information at all. Access is enforced at the database level, not just in the app.
• We can access it only where needed to run, support or secure the service.

We may disclose information where required by law, or to protect the safety and rights of users and the public.

6. Staff under 18

Muster is a workplace tool for businesses, not a service aimed at children. Many businesses do employ staff under 18, such as junior casuals. When a business adds a staff member who is under 18, that business is responsible for having the authority to do so and for meeting its own obligations to that staff member and, where needed, their parent or guardian. We handle that staff member's information exactly as this policy describes, and we never use it for marketing.

7. Emails we send

Staff get emails about their own shifts, swaps and leave. Business owners also get emails about their account and trial. These are service messages, not marketing. Staff can turn alert emails off at any time in their Muster profile. We do not send marketing emails from Muster. If we ever do, we will only send them with your consent, and every one will have an unsubscribe link.

8. How long we keep it

We keep your information for as long as your business uses Muster. Clock in and out records are retained because time and wage records generally need to be kept for seven years under Australian workplace law. If a business cancels, we will delete or de-identify its data within a reasonable period after that retention obligation ends, unless we are required to keep it longer.

9. Security

• All traffic is encrypted using HTTPS
• Passwords are hashed and cannot be recovered by us
• Data is separated by business at the database level so one customer cannot query another's records
• Sensitive actions such as clocking on, shift swaps and invites are validated on the server, not in your browser

No system is perfectly secure. If a data breach occurs that is likely to cause serious harm, we will notify affected users and the Office of the Australian Information Commissioner where required.

10. Your rights

You can ask us to:

• Give you a copy of the personal information we hold about you
• Correct information that is wrong or out of date
• Delete your information, subject to record-keeping obligations

To make a request, email hello@muster-system.com from the address on your Muster account. We will respond within a reasonable time, normally within 30 days. If you are a staff member, we may need to refer your request to your employer, since they control their business's records.

11. Complaints

If you believe we have mishandled your information, contact us using the details below and we will investigate. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

12. Changes to this policy

We may update this policy as the service changes or as privacy law changes. We will update the date at the top, and will tell customers directly about significant changes.

13. Contact us

Muster
Email: hello@muster-system.com
Web: muster-system.com
Queensland, Australia
ABN 51 392 402 605