Privacy Notice
Last updated 11/03/2026
This notice explains how GC Roster handles personal data. The controller is Luca-Joel Riechert, Hochstraße 14, 57368 Lennestadt, Germany, info@rie-charts.de.
Contractors using the service
We process your name, work email, company details, sign-in data and billing status to provide the service and your account (GDPR Art. 6(1)(b)). Payments are handled by Stripe. We do not see or store card numbers.
Subcontractors and insurance contacts
A contractor who works with you added your business contact details to request and track your documents. We process what you or they provide: company name, contact person, trade, email, phone, insurance agent email, uploaded certificates, licenses, OSHA cards with workers' names, lien waivers and the values on them. For this data, we act on behalf of that contractor. Please direct requests to them first. You can stop automatic reminders with the link in every reminder. If a contractor asks your insurance agent for a document, the agent gets one email with a link for that subcontractor only and can opt out of further emails.
Automatic reading of documents
If the contractor's plan includes it, uploaded certificates, licenses and OSHA cards are sent to an AI service to suggest the values on them. Lien waivers are not. A person at the contractor confirms the result. No automated decision with legal effect is made about anyone.
Service providers
- Hosting: Hetzner Online GmbH, Germany
- AI reading: Anthropic PBC, USA. Anthropic does not train its models on this data and generally deletes it within 30 days
- Payments: Stripe
- Email delivery: Hetzner Online GmbH, Germany
Providers process data only on our instructions under data processing agreements. Transfers outside the EU rely on the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.
Security
Files are encrypted at rest, kept private and opened only through links that expire within minutes. Upload links are limited in time and valid for one subcontractor. Changes are logged.
Cookies
We use one necessary cookie to keep you signed in. We do not use advertising or analytics cookies.
Retention
We keep data while an account exists. When an account is deleted, its records and files are removed, and encrypted backups roll off within 14 days. Certificates stay on file as long as the contractor keeps them, because audits look back.
Your rights
You can ask for access, correction, deletion, restriction or a copy of your data, and object to processing. You can complain to a data protection authority, for example the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen. California residents have similar rights under the CCPA. We do not sell personal data.