Privacy policy

Last updated August 2026.

Who this is for

BuOnly is employee scheduling for small shops (typically 3–15 people, one location). This policy covers shop owners, managers, and the data you enter about staff.

What we collect

• Shop name, location timezone, and billing contact
• Manager accounts (email, password hash)
• Staff display names and optional phone numbers you enter
• Schedules, assignments, time-off requests, punch times, and swap notes
• Technical logs (IP, browser) for security and abuse prevention

What we do not do

• No GPS or location tracking of staff phones
• No screen recording, keystroke logging, or employee monitoring
• No access to POS tickets, inventory, or payroll bank accounts
• No selling your roster to ad networks
• No marketing pixels on the staff wall (/w/:token)

Staff wall links

Published schedules are visible to anyone with the share link. Treat links like a photo in the group chat — rotate the token from Settings if a link leaks. Staff do not need user accounts; they identify with a PIN only for swaps and kiosk punch.

Retention

Active shop data is kept while your subscription or trial is active. You may export punch data before canceling. We delete or anonymize shop data within 90 days of account closure unless law requires longer retention.

Processors

We use hosting and payment processors (e.g. Stripe) under their own privacy terms. We do not share staff schedules with them beyond what billing requires.

Your rights

Contact us to access, correct, or delete manager account data. Staff names on a schedule are controlled by the shop owner as data controller.

Contact

privacy@buonly.example — replace before production launch.