Staff privacy notice

Control Room by 7 Days to Air keeps your name, mobile, email, Telegram id, employment type, award level and pay rate, availability, leave, preferences, shifts, clock-ins, course progress, CPD hours, your answers, reflections and active time on courses, professional bodies, the CPD certificates you upload, the messages you send and get through the app and when you agreed to messages to run the roster and pay and record your CPD.

Your details are kept in the United States (us-east).

Some services we use are overseas: the AI behind StanAI (Anthropic, US) reads the messages you send so it can understand them, Telegram carries Telegram messages, Resend (US) sends our emails and ElevenLabs (US) reads course text aloud for narration.

Only the owner, the managers and the 7 Days to Air team who support the app see your details; other staff see only the public roster.

Emails come from 'Control Room by 7 Days to Air via Control Room'.

Every message email has a 'Stop these emails' link.

If you turn on phone alerts, a short alert goes through your phone maker's notification service (Apple or Google).

Your hours go to the workplace's Xero Payroll so you're paid.

If the owner adds you to Xero from the app, your name, email, date of birth, home address and start date are sent to Xero; the app itself doesn't keep that address or date of birth.

If your date of birth is on your profile, it is kept only to pay the award's junior rates and apply its under-18 shift limits; only the owner and managers can see it, and it is never put in a message, a log or the public roster.

On a course we record each attempt: your answers, your reflection and your active time (counted only while the page is open and in use); your CPD minutes are that active time, never more than the course is long.

Your CPD record and the certificates you attach are kept so you can show your professional body, and you can download your own record from your Learning tab; after you leave, the owner can send it to you.

If you attach a certificate to outside CPD, the AI (Anthropic, US) reads it to suggest the entry's details, and nothing counts until you check and save it.

Course narration is made from the approved course text only, never from your personal details, and the recordings are kept with the course.

If the owner connects their own ElevenLabs key, it is kept encrypted in our secret store (never in the database) and is never shown again.

If you send a rant or an idea through the app, its words go to our build team's GitHub with names, phone numbers, emails and links removed.

GitHub gets only the sender's role.

Conversations with StanAI are deleted after 90 days.

Your other details are kept while you work here and for 7 years after you leave, as employment records; after 7 years we ask the owner to delete them.

You can ask your manager to see or correct your details.

We also count visits to My page, the Telegram app and the workplace iPad: which page was opened, never who opened it, with no recordings and nothing stored on your device.

Those counts go to PostHog in the EU, which, like any website, sees the connection's network address.

PostHog keeps usage events for its default period (1 year on the free plan) and recordings for 1 month.