Privacy Policy

ClockFern ("we", "us") is a workforce time-tracking and scheduling service operated by Ricky Reasner. This policy explains what data we collect, how we use it, and how to exercise your rights.

Data we collect

• Account data — name, email, hashed password, company name, role, time zone.
• Time-tracking data — clock-in/out timestamps, GPS coordinates (when geofencing is enabled), device identifiers, kiosk PIN entries.
• Billing data — will be handled by Stripe when paid subscriptions launch. We store the Stripe customer/subscription IDs and plan tier. We never see or store full card numbers.
• Usage analytics — server logs (IP, user agent, request paths) kept for security review for up to 90 days.

How we use your data

• To provide the time-tracking, scheduling, and payroll-export functionality.
• To process paid subscriptions through Stripe when billing is launched.
• To send transactional emails after an email provider is configured.
• To detect and prevent abuse (rate limiting, anomaly detection).

Sharing

We share data only with the subprocessors that make the service work:

• Stripe — billing. Stripe Privacy
• Resend — transactional email. Resend Privacy
• Hostinger / Caddy — VPS hosting + TLS termination.

We do not sell or rent your data. We do not share it with advertisers.

Retention

Account data is retained for the lifetime of your subscription plus 30 days. After cancellation, you can request deletion at any time. Time-tracking records are kept for the duration required by your jurisdiction's payroll law (typically 3-7 years), then purged. Server logs are kept for up to 90 days.

Your rights

You can access, correct, export, or delete your account data by emailingprivacy@shiftdeck.techor through the in-app settings page. We respond within 30 days. EU/UK residents have additional rights under GDPR; California residents under CCPA.

Security

Passwords are hashed with bcrypt and website traffic uses TLS. Administrative access is restricted by account role and company membership. Additional security and backup controls are being verified during the early-access pilot.

Children

ClockFern is a B2B service intended for adults managing payrolled employees. We do not knowingly collect data from anyone under 16.

Changes

Material changes to this policy will be announced via email at least 30 days before they take effect.

Contact

Privacy inquiries: privacy@shiftdeck.tech