Privacy policy

Last updated: September 11, 2026

This is a translation for reference. The Japanese version is the authoritative text; if the two differ, the Japanese version governs.

Who runs the Service

Operator
Kohei Kawamura
Service
Spatto (spatto.app / staff.spatto.app)
Contact
support@spatto.app

What we store

Only what is needed to build a schedule.

From the person running a shop

  • Email address (used to sign in; there are no passwords)
  • Google account id, email address, and display name (only if you sign in with Google)
  • Company name and shop name
  • Shop conditions and anything special for a period (written text)
  • Notes written about a staff member (written text). These are not shown to that person
  • Payment details (handled by Stripe, as described below)

From staff

  • Name (registered by the person running the shop)
  • Email address (used for the invitation and to sign in)
  • When you can work, and anything special for a period (written text)
  • Your usual conditions — the ones that do not depend on the month (written text)
  • Requests to change a shift (written text)
  • A push notification address (only if you allow notifications; it is an identifier issued by your browser)

The input is not split into fields. Conditions are received as written text, so what you write may include personal circumstances that you choose to mention. Please write only what is needed to build the schedule.

What it is used for

  1. To read the text as conditions and build a schedule
  2. To show you how it was read, so you can spot a misreading yourself
  3. To tell the person running the shop which conditions could not be met
  4. To sign you in and identify you
  5. To bill the fees

Nothing else. It is not used for advertising and it is not sold to anyone.

Who can see what

  • You can see what you wrote and how it was read
  • You can see other people's shifts at the same shop (the times and who is on)
  • You cannot see what other people wrote
  • Notes written by the person running the shop are not shown to the staff member

These lines are enforced by database permissions. They are not merely hidden on screen, so changing the URL or calling the API directly does not return them.

Outside services we pass data to

Building a schedule requires the written text to be read by an AI. Every place data is passed to is listed here.

Anthropic
The written text of work conditions, shop conditions, notes, and usual conditions, plus the names used and the dates in question. Passed in order to read them as conditions and build a schedule
Supabase
All of the stored data above. Used for the database and authentication, stored in the Tokyo region
Vercel
Request traffic. Used to serve the site
Stripe
Company name, email address, and payment details. Card numbers are handled by Stripe and never reach us
Google
Email address and account id, only if you sign in with Google

Anthropic receives only the text, the names used, and the dates. Email addresses, shop identifiers, and account identifiers are not passed. For all of these services, the settings do not allow the data we hold to be used for training.

How long it is kept

  • When someone's time at a shop ends, their text and past shifts remain. This is so that past schedules stay readable. What is removed is only the link that puts them into schedules from then on
  • If a company is deleted, all data belonging to that company is deleted

Access, correction, and deletion

You can change what you wrote from your own screen. For anything else, please use the contact address above. If you are a staff member, please speak first to the person running the shop where you work — they are the one who registered your name and email address.

Changes

When the content changes, we update this page to say so. The conditions of use are in the terms of service.