Last updated: June 2026
GrievanceFree is operated by Lawin Holdings, Inc. ("GrievanceFree", "we", "us"). We provide union-compliant employee-scheduling software to manufacturing employers ("Customers"). This policy explains how we handle personal information.
Account data you provide (name, work email, organization, role). Employee/scheduling data your organization enters (employee names, positions, shifts, availability, seniority). Billing data is handled by our payment processor (Stripe) — we do not store full card numbers. Operational logs and limited usage/diagnostic data.
To provide and operate the scheduling service for your organization, authenticate users, process subscriptions, provide support, secure the service, and meet legal obligations. For employee/scheduling data, your organization is the controller and we act as a processor on its behalf.
We use trusted providers to run the service, including Supabase (database hosting), Vercel (application hosting), Stripe (payments), Resend (transactional email), Cloudflare (DNS/email routing), and Sentry (error monitoring). Each processes data only as needed to provide their function.
We do not sell personal information. We share data only with the subprocessors above, within your organization per its access controls, or when required by law.
We use encryption in transit, tenant isolation (row-level security), encrypted secrets, and access controls. No method is perfectly secure, but we work to protect your data and disclose material incidents as required.
We retain data for as long as your organization maintains an account, and for a limited period afterward as needed for legal, backup, and operational purposes, then delete or anonymize it.
Depending on your location you may have rights to access, correct, or delete personal information. For employee data, contact your organization (the controller). For account data, contact us.
Questions about this policy: support@grievancefree.com.