Legal
Terms & privacy.
Plain-language terms, how we handle your data and how candidate data stays under your control.
Terms of service
These terms apply when your company (the customer) uses Roster to run its hiring. By creating a workspace you confirm you can accept them on your company's behalf. This is sample text for a template and is not legal advice.
Your account
You are responsible for who you invite to your workspace and for the permissions you give them. Keep passwords private and turn on single sign-on where you can.
Fair use
- Use Roster only to hire for real roles at your company.
- Do not upload data you have no right to process.
- Do not use Roster to make automated hiring decisions without human review.
Billing
Plans are billed per seat, monthly or yearly, in advance. You can cancel at any time; yearly plans run until the end of the paid term.
Privacy notice
We collect the minimum we need to run the service: account details for your hiring team, usage logs for security and billing details for your company. We never sell personal data and never use your candidates' data to train models.
You can ask us what we hold about you, correct it or delete it by writing to privacy@roster.example.
Candidate data
For candidate data, the customer is the controller and Roster is the processor. Candidates who apply through a Roster careers site can see and download what they shared, and ask the hiring company to delete it.
- Self-identification answers are optional, stored apart from the application and never shown to interviewers.
- Diversity reports are aggregate only and hide any group under ten people.
- Rejected applications are deleted after the retention period your company sets (default: 24 months).
Security
Data is encrypted in transit (TLS 1.3) and at rest (AES-256), hosted in the US or EU region you choose. We run yearly third-party penetration tests and keep an audit log of every admin action.
Cookies
The marketing site uses one first-party cookie to remember your theme. The app uses session cookies to keep you signed in. There are no advertising cookies.