Privacy Policy

When you use the CDO workforce management platform operated by S&W Roof Tear Off Corp, we may collect the following types of information:

• Personal Information: Full name, email address, phone number, and employee identification number
• Employment Information: Job title, crew assignment, work schedule, certifications, and training records
• Time & Attendance Data: Clock-in/clock-out timestamps, break records, and shift duration
• Location Data: GPS coordinates collected during clock-in and clock-out events for job site verification
• Device Information: Device type, operating system, and browser information when accessing the platform

We use the information we collect for the following purposes:

• Workforce Management: Scheduling jobs, assigning crews, and managing daily operations
• SMS Notifications: Sending schedule updates, time clock reminders, job assignments, and operational alerts
• Time & Attendance: Recording work hours, managing pay-to-the-minute calculations, and ensuring California labor law compliance
• Safety & Compliance: Tracking certifications, training completion, and regulatory compliance
• Platform Improvement: Analyzing usage patterns to improve the platform experience

The CDO platform sends SMS messages to employees for operational purposes, including schedule changes, time clock reminders, job assignments, and important alerts. Message frequency varies based on your work schedule and operational needs.

We do not use your phone number for marketing purposes. SMS messages are limited to operational workforce communications directly related to your employment.

The CDO platform collects GPS location data at the time of clock-in and clock-out events. This data is used solely for:

• Verifying employee presence at assigned job sites
• Ensuring accurate time and attendance records
• Supporting California labor law compliance requirements

Location data is collected only during clock-in/clock-out events and is not tracked continuously. The device timestamp is authoritative for all time records.

We may share your information only in the following limited circumstances:

• Service Providers: With trusted service providers who help us operate the platform (e.g., SMS delivery, cloud hosting, email), under strict data protection agreements.
• AI Providers: When you use the CDO Assistant chat feature, your messages are processed by third-party large-language-model providers — currently Anthropic (Claude), Google (Gemini), Moonshot (Kimi), and routed through OpenRouter. Under each provider's commercial API terms, your messages and our data are not used to train their models and are retained only for the limited period required to generate a response and provide abuse / safety review. See the "AI Assistant" section below for full details.
• Legal Requirements: When required by law, regulation, or legal process.
• Employment Purposes: With your employer (S&W Roof Tear Off Corp) for workforce management and payroll processing.

What the assistant does. The CDO Assistant answers questions about your own schedule, hours, pay summaries, training records, company policies, and time-off or document requests. For managers and administrators, it can also surface operational analytics and compliance data scoped to their role.

What the assistant cannot do. The assistant is an advisor, not an actor — it cannot hire, fire, discipline, approve final pay, or make any binding employment decision on your behalf. It is not a lawyer, doctor, accountant, or licensed professional, and it will not provide legal, medical, tax, or immigration advice (California AB 489).

Third-party AI providers. Messages are sent to the providers listed in the Data Sharing section above. Under those providers' commercial terms, your data is not used to train their models and is retained only as needed to produce a response and maintain service abuse controls. We strip sensitive identifiers — Social Security Numbers, bank account and routing numbers, and similar fields — before any data is sent to a provider.

Conversation logging and review. We store your CDO Assistant conversations in our own database (hosted on Supabase in the United States) for up to two (2) years, matching California employment-record retention requirements. Authorized company personnel (HR and office management) may review conversations for quality, training, audit, and compliance purposes. Chat content is never sold.

Section 7 (NLRA) notice. You retain your federal right to discuss wages, working conditions, unionization, and group complaints with your coworkers. Logging of chat content is for the business purposes described above and is not a tool to monitor or penalize protected concerted activity. If you wish to have a fully private conversation about these topics, use a channel outside of this platform.

Your right to delete AI chat history (CCPA / CPRA). You can request that we delete your CDO Assistant conversations, API-usage logs, and consent records associated with your account. Send a written request to the contact address below; we will acknowledge within 10 business days and complete deletion within 45 calendar days (extendable by 45 days with written notice), consistent with the California Consumer Privacy Act (CPRA, Cal. Civ. Code §1798.100 et seq.). Certain records may be retained where required by law (for example, payroll wage statements under Labor Code §226). Deletion is free of charge.

Consent to interact. Before using the CDO Assistant for the first time, you will be asked to confirm that you understand you are interacting with an AI and that your conversations may be reviewed by management for the purposes above. You can decline and continue using the rest of the platform without AI chat.

We implement reasonable technical and organizational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Access controls and authentication requirements
• Regular security monitoring and auditing
• Row-level security policies in our database

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

You have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate personal information
• Deletion: Request deletion of your personal information, subject to legal retention requirements
• Opt-Out: Opt out of SMS communications by replying STOP to any message

To exercise any of these rights, please contact us using the information provided below.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will notify you through the platform or via SMS. The updated policy will be effective as of the date posted on this page.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: