Privacy Policy

1. General Provisions

This Privacy Policy explains how GoSmartAgency ("we", "our", or the "Service") collects, uses, and protects personal data when users visit gosmartagency.cz or use the GoSmartAgency web and mobile application.

For worker and coordinator data processed inside an agency account, the staffing agency or client organization acts as the Data Controller under GDPR, and GoSmartAgency acts as the Data Processor. For website contact requests and our own administrative data, GoSmartAgency may act as the Data Controller.

2. Data We Collect

We collect only the data needed to provide, secure, and improve the Service.

• Account data: name, email address, encrypted password, and user role such as SuperAdmin, TenantAdmin, Coordinator, or Worker.
• Work data: hourly rate, shift history, completed work, net hours, earnings calculations, and assignment to locations and departments.
• Technical data: device notification tokens, IP address, basic security logs, and audit logs that record important changes in the system.
• Website data: name, email address, and message submitted through the GoSmartAgency contact form.

3. How We Use Data

We use personal data only for legitimate product, contractual, security, and support purposes.

• To plan shifts, manage schedules, process worker applications, and review completed attendance.
• To calculate net hours, estimated costs, and earnings based on approved time records and hourly rates.
• To send important notifications about available shifts, approvals, cancellations, time changes, and service updates.
• To generate analytics and Excel reports for authorized agency administrators.
• To maintain security, prevent misuse, troubleshoot issues, and keep a reliable history of important account actions.

4. Third-Party Services

We do not sell personal data. We use trusted third-party providers only where needed to operate the Service.

• Firebase may be used for user authentication and push notification delivery.
• Hosting and database providers store application data and help keep the Service available and secure.
• Stripe may be used to process subscription payments. Payment card details are handled by Stripe and are not stored on GoSmartAgency servers.

5. Data Retention & Deletion

We retain personal data only as long as needed to provide the Service, meet legal obligations, resolve disputes, and preserve accurate operational and financial records for the relevant organization.

Users can request or download an export of their personal data from the application, including profile details, role, organization assignments, shift history, pause data, net hours, applied hourly rates, and earnings where available.

When account deletion is requested, the authentication profile may be deleted and the application user record is anonymized by replacing identifying values such as name and email. This protects user privacy while preserving historical shift and financial statistics required by agencies.

6. GDPR Rights

If you are located in the European Economic Area, you may have the right to access, correct, export, restrict, object to, or request deletion of your personal data, subject to applicable law and the role of your organization as Data Controller.

Where processing is based on consent, you may withdraw that consent. Some requests should be submitted to your employer or staffing agency if that organization controls the data in your account.

7. Contact

If you have questions about privacy or want to exercise your rights, contact us at:

Email: info@gosmartagency.cz