Your Data, Your Control

Your hotel data (staff records, schedules, payroll, invoices) is stored in a secure database on Supabase — a SOC 2 Type II certified platform. We use US East servers.

How your files are stored depends on the workflow:

• Staff documents: stored in your connected Google Drive, Dropbox, or Box — never in OneCore
• Applicant resumes: temporarily stored during the hiring review process, deleted on request
• Handbooks: stored in OneCore for staff access

• All data encrypted at rest (AES-256) and in transit (TLS 1.2+)
• Access tokens for Google Drive or Dropbox are encrypted with an additional symmetric encryption layer before being stored
• Key administrative actions are recorded in your audit log — you can review it any time in Settings → Audit Log
• Database-level row security (RLS) means every query is automatically scoped to your account — not something that can be accidentally misconfigured in app code

Only you and team members you explicitly invite can access your hotel's data.

OneCore platform administrators may access your workspace for technical support. All such access is logged in the audit trail.

Your data is never shared with or sold to third parties.

We store:

• Staff names, roles, departments, schedules
• Payroll records and hours (extracted from your uploaded files)
• Invoices and vendor records
• Work orders, guest issues, tasks

We never store:

• Employee SSNs, bank account numbers, or passport numbers
• Sensitive government identity documents
• Staff document files — those stay in your storage (Drive / Dropbox / Box)

Your employer decides how your personal information is used. To use any of these rights, contact the company's HR department or ask your manager.

• Export: ask for a copy of the data held about you (CSV format)
• Delete: ask for your personal data to be deleted, where the law allows
• Portability: All exports are standard CSV — no proprietary formats
• Correction: ask for any inaccurate data to be corrected

For any question about how your data is handled, contact the company's HR department or ask your manager.