Staff privacy notice

Check Am keeps the following about staff: your email address and role; your password, stored only as an Argon2id hash; your authenticator key, encrypted; your sign-in sessions, with their times and the first part of your network address; and a record of the actions you take in the admin area. We use these to control access and to keep an accountable record of staff actions. The owner, the privacy lead and the auditor can read the action record. Staff who can see a check, a review or a flag also see the staff actions recorded on it: who acted, and when. Action records are kept for 13 months. Sign-in sessions are kept for 30 days after they end. A disabled account's email is removed 13 months after it is disabled. Contact: ceo@shinzii.tech.