Easy Duty Rota
Privacy Policy
Last updated 14 October 2026
1. Who we are
Easy Duty Rota is a duty roster and staff scheduling service operated by SHAB INVESTMENT, a business registered in the Republic of Maldives. In this policy, "we", "us" and "our" mean SHAB INVESTMENT. "You" means the person using the service.
You can reach us at support@easydutyrota.com or on +960 766 6261.
2. What this policy covers
This policy explains what information we collect when you use Easy Duty Rota at easydutyrota.com, why we collect it, who we share it with, and what rights you have over it.
It does not cover other websites you might reach through links from our service.
3. Information you give us
Account information. When you create an account we collect your email address and a password. Your password is stored in an encrypted form that we cannot read.
Payment information. Card payments are processed by Bank of Maldives. You enter your card details on Bank of Maldives' secure payment page, not on Easy Duty Rota. We receive confirmation that a payment succeeded, the amount, the date and a transaction reference. We never receive or store your card number, expiry date or security code.
Rota content. This is the main information in the service, and it is entered by you:
- Staff names, and any job title or position you record
- Employment start and end dates
- Duty codes, shift assignments, on-call assignments and leave records
- Department and organisation names
- Notes you add to duty cells
- Any logo you upload
Support messages. If you contact us for help, we keep what you send us so we can answer.
4. Information about other people
This section matters, so please read it.
Most of the information in Easy Duty Rota is not about you. It is about your staff — their names, their working hours, when they are on leave, when they are on call.
Those people are not our customers. They did not sign up, and in most cases they have never heard of us. You are responsible for the staff information you enter. By using the service you confirm that you are entitled to record and process your staff's details for the purpose of scheduling their work, and that you will tell them their schedule is kept in this service if you are required to.
We handle that information on your behalf and under your instructions. We do not use it for our own purposes, we do not sell it, and we do not use it to train anything.
Please do not enter information you do not need for scheduling. Easy Duty Rota is not designed to store medical information, identity document numbers, salary details, disciplinary records, or anything else sensitive about your staff, and you should not put such information into duty notes or staff names.
5. Information we collect automatically
Session information. When you log in, our authentication provider records the time of sign-in and a session token so you stay logged in. This is necessary for the service to work.
Local storage. We keep a copy of your current rota in your browser's local storage so your work is not lost if your connection drops. This stays on your device and is cleared when you log out or clear your browser data.
Server logs. Our hosting provider automatically records technical information about requests to the service, such as IP address, browser type and time of request. These logs are used to keep the service running and secure.
We do not use third-party analytics, advertising trackers, or cookies for tracking or advertising.
6. Why we use your information
We use the information described above to:
- Give you access to your account and your rotas
- Save and display the rota content you create
- Take payment and manage your subscription
- Send you account emails, such as sign-up codes and password reset links
- Respond to you when you contact us for support
- Keep the service secure and detect misuse
- Understand how much of the service is being used, so we can plan capacity and improvements
We do not sell your information to anyone, and we do not share it for marketing purposes.
7. Who we share information with
We use a small number of service providers to run Easy Duty Rota. Each one only receives what it needs to do its job:
| Provider | What they do | Where they hold data |
|---|---|---|
| Supabase | Stores your account, rotas and staff data. Handles login and password resets. | Data centres outside the Maldives |
| Vercel | Hosts the website and serves it to your browser. | Global network |
| Resend | Sends account emails, such as sign-up codes and password reset links. Receives your email address and the content of those emails only. | Data centres outside the Maldives |
| Bank of Maldives | Processes card payments. Card details are entered directly with Bank of Maldives. | Maldives |
| Anthropic, PBC | AI processing for the Ini assistant | USA |
We may also disclose information if we are legally required to do so, or where it is necessary to protect the safety of a person or the security of the service.
8. Where your data is stored
Easy Duty Rota is operated from the Maldives, but our hosting, database and email providers, and our AI provider (Anthropic, USA) for notes sent to the Ini assistant, store data on servers outside the Maldives. By using the service you understand that your information, including staff information you enter, will be stored and processed outside the Maldives.
9. How long we keep information
We keep your account and rota content for as long as your account is active.
If you delete your account, we remove your account and its associated rota content within 30 days. Your access ends immediately when you delete.
If your trial or paid plan ends, we do not delete your data. Your account moves to a view-only state and your rotas remain available to look at. This is deliberate — a rota is a working record, and losing it because a payment was missed would be worse than losing access to editing.
We may keep a minimal record of payments for as long as required for accounting and tax purposes.
10. Your rights
You can:
- See your data. Everything you have entered is visible in the app, and you can export rotas at any time.
- Correct your data. You can edit any staff record, duty or setting yourself.
- Delete your data. You can delete your account from Settings. This removes your account and its rotas.
- Ask us questions. Contact us at support@easydutyrota.com if you want to know what we hold about you or why.
If you are a staff member whose details appear in someone's rota and you want them removed, please speak to your employer first — they control that record and can change it directly. If that is not possible, contact us and we will do what we reasonably can, but understand that we may need to involve the account owner.
11. Security
We protect your data with:
- Encrypted connections (HTTPS) for everything sent between your browser and our servers
- Database access rules that prevent one account from reading another account's data
- Encrypted password storage
- Email verification of new accounts
- Two-factor authentication on our own administrative accounts
Payment card security. Card details are sent only to Bank of Maldives' secure payment page, over an encrypted connection. Where your bank supports it, payments are verified with 3-D Secure (such as Visa Secure or Mastercard Identity Check). Easy Duty Rota never sees, transmits or stores your card details.
No service can promise perfect security. If a breach occurs that affects your information, we will tell you as soon as we reasonably can.
12. Children
Easy Duty Rota is a workplace tool and is not intended for anyone under 18. We do not knowingly collect information from children.
13. Beta status
Easy Duty Rota is a young service and is still being actively developed. We say this plainly because it matters: features change, and occasionally things break. We take backups and we are careful, but you should keep your own exports of any rota you cannot afford to lose.
14. Changes to this policy
If we change this policy in a way that materially affects you, we will let you know in the app or by email before the change takes effect. The date at the top shows when this version was published.
15. Contact
SHAB INVESTMENT (trading as Easy Duty Rota)
G. Ranhiri, Ameenee Magu, Male' 20093
Republic of Maldives
Phone: +960 766 6261
Email: support@easydutyrota.com
16. Ini, the AI rota assistant
Departments on the Plus and Pro plans can use Ini, an assistant that turns a manager’s written note into suggested rota changes. When a manager sends a note, Easy Duty Rota sends the following to our AI provider, Anthropic, PBC (USA), to process it:
- the note itself;
- the names of staff as they appear on that rota;
- the department’s duty codes and their labels, leave types and shift names;
- the dates being planned.
We do not send email addresses, phone numbers, account or payment details, or anything from other departments.
Anthropic does not use this information to train its AI models. It deletes it within 30 days, except where it must keep it longer for legal or safety reasons.
Ini only suggests changes. Nothing is saved until the manager reviews and confirms them, and confirmed changes are stored like any other edit to the rota. We keep a simple count of notes used (the date, department and user) to apply monthly limits. We don’t store the text of the notes.