Privacy Notice

ClockDesk processes information needed to provide employee time tracking. This can include manager account information such as name and email address; workspace settings and business name; employee names, employee IDs, job titles, employment status, and clock status; and clock-in, clock-out, break, timesheet, overtime, and correction-history records.

Employee PINs are not intended to be stored as readable PIN values. ClockDesk stores PIN verification data as password hashes so the original PIN is not needed for normal verification.

ClockDesk uses Supabase for authentication and backend data services. If you choose Google sign-in, Google provides the account information needed to authenticate you. ClockDesk does not receive your Google password.

Subscription checkout and billing management are handled by Stripe. ClockDesk stores billing identifiers and subscription status needed to connect a workspace with its Stripe customer and subscription. Full payment-card details are handled by Stripe rather than stored in the ClockDesk application database.

ClockDesk uses service providers to operate the product, including Supabase for authentication, database, and backend functions; Vercel for web hosting and delivery; Stripe for subscription billing; and Google where a user chooses Google authentication. These providers process information as needed to provide their services.

Information is used to operate ClockDesk, authenticate users, keep business workspaces separated, record employee time activity, provide timesheets and audit history, process subscription status, troubleshoot problems, respond to support requests, and protect the service from misuse.

ClockDesk keeps information while it is needed to provide the service and for reasonable operational, security, backup, dispute, or legal needs. A workspace owner who needs help with account information or a deletion request can contact ClockDesk through the Support page. Some records may need to be retained when required for security, fraud prevention, dispute resolution, or legal obligations.

ClockDesk uses account authentication, workspace-based database access controls, server-side billing functions, hashed employee PIN verification, and scoped employee and kiosk session tokens. No online service can guarantee absolute security, so users should also protect their account credentials and devices.

Businesses using ClockDesk decide which employee information they enter and are responsible for providing any notices, permissions, or disclosures required for their workforce and jurisdiction.

This notice may be updated as ClockDesk changes. Material updates will be reflected on this page with a revised effective date.