Privacy Policy

1. Information We Collect

When you use Punchcard, we collect the following types of information:

• Account information: Your name, email address, and password when you create an account or are invited to a workspace.
• Time tracking data: Time entries, project assignments, task descriptions, and notes you enter into the Service.
• Billing information: Bill rates, cost rates, and client/project billing configurations set by workspace administrators.
• Usage data: Log data such as IP address, browser type, and pages visited to help us maintain and improve the Service.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Generate reports, invoices, and payroll summaries as requested
• Send transactional emails (invitations, password resets, reminders)
• Monitor and prevent security threats and abuse
• Comply with legal obligations

3. Data Sharing

We do not sell your personal information. We may share data only in the following circumstances:

• Within your workspace: Administrators in your workspace can view time entries, reports, and billing data for all workspace members.
• Service providers: We use third-party services (hosting, database, email delivery) that process data on our behalf under strict confidentiality agreements.
• Legal requirements: We may disclose information if required by law, regulation, or legal process.

4. Data Storage and Security

Your data is stored on secure servers provided by our infrastructure partners. We implement industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords, and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you request account deletion, we will remove your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your data in a standard format
• Withdraw consent for optional data processing

To exercise these rights, contact us at the email address below.

7. Cookies

We use essential cookies for authentication and session management. These cookies are necessary for the Service to function and cannot be disabled. We do not use tracking or advertising cookies.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or through the Service. The "Last updated" date at the top of this page indicates when the policy was last revised.

9. Contact

If you have questions about this Privacy Policy or your data, please contact us at support@punchcard.app.