Legal
Privacy Notice
Last updated: September 20, 2026
This notice explains how Copraxis LLC collects, uses, shares, and retains personal data when you use RxRoster, and the rights you have over that data.
1. Who is responsible for your data
Copraxis LLC ("Copraxis", "we", "us") is the data controller for personal data processed through RxRoster. Contact us at hello@rxroster.com.
2. What we collect
- Account data: your email address and sign-in credentials (one-time email links) when you use RxRoster Pro.
- Schedule data: the schedules, employee names, shifts, and related content you save to a Pro workspace. On the Free plan, schedule data stays in your browser and is not sent to our servers.
- Support messages: emails and feedback you send us.
- Usage and device data: basic telemetry, log data, device identifiers, and IP address used to operate and secure the service.
Payment card and billing details are collected and processed by Paddle, our Merchant of Record, and are not stored by us.
3. Why we use it and our legal basis
- Creating and operating your account and providing the service — performance of our contract with you.
- Security, fraud prevention, and service reliability — our legitimate interests.
- Product improvement and aggregated usage analysis — our legitimate interests.
- Customer support — performance of our contract and our legitimate interests.
- Meeting legal and tax obligations — legal obligation.
4. Who we share it with
- Service providers and subprocessors that host and operate the service (cloud hosting, database, authentication, email delivery, analytics, and support tooling), bound by contractual safeguards.
- Paddle, our Merchant of Record, for the sale of subscriptions, payment processing, tax compliance, and invoicing.
- Professional advisers (legal and accounting) where needed.
- Authorities where required by law.
We do not sell your personal data.
5. International transfers
Some service providers process data outside your country, including outside the UK and EEA. Where data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.
6. Retention
We keep personal data for as long as your account is active or as needed to provide the service, meet legal obligations, and resolve disputes. When data is no longer needed, it is deleted or anonymised.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent where processing is based on consent. If you are in the UK or EEA, you also have the right to complain to your supervisory authority; we respond to verified requests within one month. To exercise any right, email hello@rxroster.com.
8. Security
We apply appropriate technical and organisational measures, including encryption in transit, access controls, and row-level isolation of workspace data, to protect your personal data.
9. Cookies
RxRoster uses essential storage and cookies required to run the service (for example, keeping you signed in and saving Free-plan schedules in your browser). We do not use advertising or marketing cookies. You can clear or block cookies and site data in your browser settings; doing so may remove locally stored Free schedules.
10. Changes
We may update this notice from time to time. The "Last updated" date above reflects the latest version, and material changes will be highlighted on this page.