Worker data stays within the workspace.
The public marketing site does not load Firebase.
We do not sell personal information.
Last updated 2026-10-15
Worker data stays within the workspace.
The public marketing site does not load Firebase.
We do not sell personal information.
Sofia Workforce is hospitality rostering software and an AI shift-leader line. This page describes what we actually collect and where it goes. It is not a certificate, a DPA, or a promise that we have finished every control a larger vendor would list.
Sofia Workforce Pty Ltd. Questions: hello@sofia-workforce.app.
If you create a workspace we store the name, an optional logo, and the email you sign in with (Firebase Authentication, including Google sign-in if you use it) and the operational data you put in the product: people, positions, shifts, punches, availability, time off, Auto-Fill runs, and — once a store number is live — call transcripts, caller ID, and recordings for the store’s audit.
When you enable the phone line, audio is processed by the voice provider (xAI Grok Voice) and telephony provider (Twilio). We store the transcript and outcome on the call record. Tanda tokens, when connected, are held only on the server.
If you subscribe, Stripe processes the card. We store Stripe customer and subscription ids on the server. We do not store the card number. Cancel and those payment details are detached.
If you write to us from the contact page we receive your name, email and message.
If you request an information pack we store your name, email, optional workplace, industry, location count, how you heard about Sofia, the page path, the language, the referring site, and any campaign tags on the link you opened. The pack is the PDF we email. We do not publish that file.
The production app is configured with Firebase Analytics (a Google Analytics measurement ID). Page views on the hosted product may be recorded that way. The public marketing site does not load Firebase.
Google Firebase: Authentication, Cloud Firestore, Cloud Functions, App Hosting. Access to workspace data is enforced by Firestore rules — your roster is not a public document.
We do not sell personal information or share worker profiles outside their workspace.
Workspace data stays while the workspace exists. Ask us to delete an account and we will. Contact mail that never reached a configured endpoint was never stored by us.
Sofia does not calculate Australian Modern Award rates and does not push pay items into Xero or MYOB. Fair-workweek figures in the app are estimates, not legal advice. Auto-Fill proposes; you publish. Call Sofia writes only through those same rules, for in-policy late / call-off / swap. Each store has its own number after you subscribe. This site does not publish a line to call.
If the data we collect changes in a material way, this page will change before we collect it.
© 2026 Sofia Workforce Pty Ltd