Privacy Policy

1. Who we are

Dallero is run by a sole trader business registered in Sweden, which is the controller described below. You can reach us about anything in this policy at info@dallero.com.

This policy covers the Dallero website and web portal, the Dallero employee app and the Dallero time clock app. Our Terms of Service also apply.

2. Our two roles

• Workplace data: your employer is in charge. When a company uses Dallero, the company (your employer) decides what data about its staff is entered and why. For that data the company is the controller and we are its processor: we only handle it on the company's instructions, under the data processing terms in section 12 of our Terms. Questions about why your employer holds some data, or requests to change or delete it, should go to your employer first. We will help them.
• Your account and our website: we are in charge. For your own Dallero account, for our website and for keeping the Service secure and working, we are the controller.

3. What we collect

Your account

• Your name, email address and profile photo (taken from your Google or Apple sign-in if you choose), and an ID from the sign-in provider.
• Your settings, such as language, time format, theme and which notifications you want.
• A phone number if you add one to your profile, and whether you share it with colleagues.

Workplace data (entered by your employer or by you)

• Your employee record: name, email, role, departments, position tags, employment status and a photo your employer may add.
• Private details your employer may enter: personal ID number (for example PPS number), date of birth, phone number and address.
• Pay rates and pay additions, and the estimated pay calculated from your shifts.
• Shifts: planned times, clock-in and clock-out times, who clocked you in or out, notes and messages.
• A history of every change to a shift (what changed, when and by whom), which employers may need to show where working hours were recorded correctly.
• Requests you send: days you are unavailable, absence reports (for example that you are off sick, for which days; we do not ask for medical details) and interest in open shifts with an optional note.
• Company data such as departments, shift templates and daily sales figures.

Location

If your employer turns on location for clock-ins, the employee app checks your phone's location only at the moment you clock in, to confirm that you are at the workplace. We do not track you and we do not store your location. The time clock tablet does not use your location.

AI assistant

Where it is available, owners and admins can ask Dallero's AI assistant about their company, by typing or by speaking. For this we process:

• What the owner or admin types or says. Speech is sent to Google while it is spoken and turned into text. We do not keep the recording.
• The workplace data needed to answer, looked up for that company only. This can include names, email addresses, phone numbers, dates of birth and ages, start dates, shifts and shift notes, pay rates and estimated pay, absences and their notes, interest in open shifts, messages, invitations and company settings.

The assistant cannot see personal ID numbers or home addresses. It can suggest shifts, but nothing is saved until an owner or admin has reviewed and accepted them.

Devices and technical data

• A push notification token, so we can send you notifications such as new shifts.
• Crash reports and basic app usage statistics from our apps (device model, operating system, app version and what happened when something went wrong), so we can fix problems.
• Technical logs from our servers, such as times and error messages, kept for security and fixing problems.

Emails and support

Invitation emails, the daily summary email for managers and anything you write to us when you contact us.

4. Why we use it, and on what legal basis

Absence reports can count as health data. Your employer handles them under its duties as an employer (Article 9(2)(b)); we only store them for your employer. The AI assistant reads them only when an owner or admin asks about absences.

We do not sell personal data, show ads in Dallero or make automated decisions that have legal or similar effects on you. What the AI assistant suggests stays a suggestion until a person accepts it.

5. Cookies and measurement

Signing in and using Dallero needs no tracking cookies. Firebase (Google) keeps you signed in and stores your company's data; that is part of the service and needs no choice.

We count page visits and new companies with Plausible, an analytics service hosted in the EU. It sets no cookies, stores nothing on your device, keeps no IP address and can't recognise a visitor from one day to the next. We only see totals, such as how many people visited a page and which ad or website they came from, so this needs no choice.

With your permission we also measure how Dallero is used and whether our ads work. Both tools load only after you choose Accept in the cookie banner, and nothing is sent to them before that:

• Firebase Analytics (Google): which pages are used and where setting up a company stops, so we can improve Dallero.
• Meta Pixel (Facebook and Instagram): whether a visit or a newly created company came from one of our ads. Meta receives the page you visited, the ad you came from and a browser identifier, and uses them under Meta's privacy policy.

Your choice is stored in this browser only, not on our servers, and you can change it here at any time. After declining, nothing more is sent to these two tools.

6. Who can see your data

Inside your company

• Owners and admins of your company see all workplace data about you, including private details and pay. They can also ask the AI assistant to look up this data for them, apart from personal ID numbers and home addresses.
• Colleagues see your name, profile photo, email, departments and the shared schedule, and your phone number only if you choose to share it. They never see your private details (personal ID number, date of birth, address).
• Companies never see each other's data. If you work for two companies, each sees only its own.

Service providers (sub-processors)

We use a small number of providers to run Dallero. They may only use the data to provide their service to us.

For the AI assistant, Google does not use your data to train its AI models. It may hold the data in a cache for up to 24 hours to answer faster, and it may log prompts to detect abuse of its service, as its terms allow.

Others

We share data with authorities only when the law requires it, and we may share it to protect our rights or someone's safety. If Dallero is transferred to another business (for example a company we set up to run it), your data moves with it under this policy.

7. Transfers outside the EU

Your data is stored in the EU. When a provider handles it outside the European Economic Area, the transfer is protected by the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses. You can ask us for more information.

8. How long we keep data

• Workplace data: as long as your company uses Dallero, or until your employer deletes it. Your employer decides how long to keep records, for example to meet its legal duty to keep records of working time.
• Leaving a company: your employer keeps your past shifts and records as a former employee, because it may need them by law. You keep access to your own records.
• When a company closes its account: we delete its data within 90 days, unless the law requires us to keep it.
• Your account: until you delete it. Accounts that have not been used for more than 24 months may be deleted.
• Invitations: deleted 14 days after the last email if they are not accepted.
• AI assistant: we do not store conversations or recordings. A conversation stays in the browser until the page is closed or reloaded. Our server logs show that the assistant was used, not what was asked. When it cannot help, we keep a short general topic such as "editing shifts" for up to 30 days, so we can improve it, but never the question or anyone's name. Google may hold data for a short time, as described in section 6.
• Crash reports, analytics and server logs: kept for a limited time set by Google, usually no longer than 14 months.

9. Security

We protect your data with encryption in transit and at rest (by Google), access rules that let each person see only what their role allows, sign-in through Google, Apple or email, shift histories that only our servers can write, and by giving as few people as possible access to the systems.

No method of storing or sending data over the internet is completely secure, so we cannot guarantee absolute security. If a breach affects your data and puts you at risk, we will tell the affected company, and you where the law requires it.

10. Your rights

Under the GDPR you have the right to:

• get a copy of your personal data;
• have wrong data corrected;
• have data deleted, or its use restricted, in some cases;
• get data you gave us in a machine-readable format;
• object to use based on legitimate interests;
• withdraw your consent at any time, for example to cookies (see section 5).

For workplace data, please ask your employer first; they decide about it and we help them. For anything else, email us at info@dallero.com. We answer within one month. You can update your name, photo, phone and settings yourself in the app or on the web, and delete your profile in the employee app under My profile.

You can also complain to a data protection authority, for example the Data Protection Commission in Ireland (dataprotection.ie) or the Swedish Authority for Privacy Protection, IMY (imy.se), which supervises us.

11. Children

Dallero is a workplace tool and is not meant for children. You must be at least 16 years old to have your own account, and we do not knowingly collect data from younger children.

12. Changes to this policy

We may update this policy when Dallero or the law changes. For important changes we will tell users by email or in the Service before they take effect. The date at the top shows the latest version.

13. Contact