Privacy Policy

Last updated: April 2026

1. Overview

Treasured Holdings LLC, doing business as RosterDr ("RosterDr," "we," "our," or "us"), provides an emergency room scheduling platform for healthcare organizations. This Privacy Policy describes how we collect, use, and protect information when you use our service.

2. Information We Collect

We collect the following information provided by your employer/administrator or directly by you:

Account Information: Name, email address, phone number, role, and employment type
Scheduling Data: Shift assignments, availability, time-off requests, scheduling preferences, and swap requests
Credential Information: Professional license types, license numbers, and expiration dates
Communication Data: SMS messages sent and received through our scheduling system, notification preferences
Usage Data: Actions taken within the platform (logged for audit purposes)

3. How We Use Your Information

We use your information to:

Create and manage work schedules for your organization
Send scheduling notifications via SMS and/or email
Process schedule preference requests and time-off requests
Track credential compliance and expiration alerts
Generate payroll and timecard reports
Maintain audit trails for accountability

4. SMS/Text Messaging

If your administrator enables SMS notifications:

You may receive text messages about schedule changes, preference requests, and shift updates
Your responses to SMS messages are processed by AI to extract scheduling preferences and availability
You can opt out of SMS at any time by texting STOP
Text HELP for assistance
Message and data rates may apply
Message frequency varies based on scheduling activity

5. Data Storage and Security

Your data is stored securely using Google Firebase/Firestore with the following protections:

Data is encrypted in transit (TLS) and at rest
Access is restricted to authenticated users within your organization
Role-based access controls limit what each user can see and do
All actions are logged in an audit trail

6. Data Sharing

We do not sell your personal information. We share data only with:

Your organization's administrators — who manage scheduling
Service providers: Google Cloud (hosting/database), Twilio (SMS), SendGrid (email) — only as needed to operate the service
AI processing: Google Gemini may process scheduling-related text to extract structured data (e.g., parsing SMS responses into availability dates)

7. Data Retention

We retain your data for as long as your organization maintains an active account. Your administrator can delete data at any time. When your account is deactivated, your scheduling data is retained for audit purposes but is no longer used for active scheduling.

8. Your Rights

You have the right to:

Access your personal information through the provider portal
Update your contact information in your profile settings
Opt out of SMS and email notifications
Request data deletion through your administrator

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes through the application.

10. Contact

For privacy questions, contact your organization's administrator or email us at support@rosterdr.com.