Access
Three roles, ranked.
Staff, manager, admin. Each rank reaches everything the rank below it reaches, and a little more.
What a record holds.
A staff member is archived, never deleted, so attendance and pay history stay attached.*
* The record moves between active, inactive, resigned and archived. Removing it would take the history with it.
A bank account number shows its last four digits until someone asks for the rest.*
* The full number is returned only on a deliberate reveal.
Asking for the rest writes down who asked, and when.*
* Reveals, uploads and deletions of identity and bank details are each recorded against the restaurant.
The signed offer letter sits against the record, not in someone’s inbox.*
* A PDF or Word file up to 10 MB, stored privately and opened through a link that expires.
Joining
Two ways in.
Invite a phone number and the staff member signs in with a one-time code. Or add a record for someone who never opens the app.
One record, four states.
Three roles rank what a login can reach.¹
Four statuses follow a staff member from joining to leaving.²
A bank account number shows four digits by default.³
A document link stops working after five minutes.⁴
- ¹ Baseline: staff, manager and admin, held by a database constraint and checked again on each request.
- ² Baseline: active, inactive, resigned and archived. Archiving keeps attendance and pay history readable.
- ³ Baseline: the last four. The full number needs an explicit reveal, and the reveal is recorded.
- ⁴ Baseline: signed links to the private document store, issued one request at a time.
Questions? Answers.
How does someone get access?
An admin invites their phone number. The invitation arrives by SMS, and the staff member signs in with a one-time code. No password.
Can I add someone who will never use the app?
Yes. A staff record needs a name, a job title, a salary and a shift. A login is optional.
Which roles can be invited?
Staff and admin today. The manager role is enforced everywhere in the product, but the invitation form does not offer it yet.
Is staff identity data encrypted?
Not at the field level. Documents sit in a private store reached only through short-lived links, account numbers are masked by default, and every access is recorded.
Does the product write the offer letter?
No. It stores the one you signed, and hands it back through a private link when you need it.
What happens when a staff member leaves?
Mark them resigned or archived. They drop off the daily roster and stay on the months they worked.