Privacy Policy

• Account details: your name, email and/or mobile number, your language, and your password (stored only as a one-way hash we can’t read).
• Company details: the company name, time zone, working hours, jobs and their addresses, and people’s roles, titles and pay settings entered by the office.
• Time records: when you clock in and out, which job, breaks, notes, time requests and every edit the office makes.
• Location: your phone’s location at the moment you clock in or out, and when you add a job photo, so the office can see you were at the site. It is not tracked in the background or between punches. Your phone asks your permission first, and clocking out works even if you say no.
• Photos and receipts you upload. We strip the hidden location data from photos and store the phone’s reading instead, as above.
• Billing: handled by Stripe. We keep the plan, the number of people billed and the billing email; card details stay with Stripe, and we never see the full card number.
• Technical data: IP addresses and sign-in events, used to keep accounts secure and limit abuse. Cookies keep you signed in and remember your language, theme and last company. We use no advertising or tracking cookies.

We never ask for or store Social Security numbers, bank account numbers or tax IDs.

• To run the service: clocks, timesheets, job costs, reports.
• To send the emails the service needs: invites, password resets, email confirmations, timesheets to your bookkeeper and billing notices.
• To keep the service secure, fix problems and answer support requests.

We don’t sell personal information, share it for advertising, or use it to train AI models.

• Your company: the owner and admins see their crew’s time, locations at punches, photos and receipts. Bookkeepers see timesheets and reports. Crew members see their own records. One company can never see another’s data.
• Our service providers, only to run the service:
  • Vercel (hosting) and Neon (database), in the United States
  • Resend (email delivery)
  • Stripe (payments)
  • Anthropic (reading receipt photos to fill in vendor, date and totals)
  • The US Census Bureau geocoder (turning job addresses into map pins)
  • OpenFreeMap (map tiles your browser loads)
• The law: we’ll disclose information if we’re legally required to, and will tell the affected company first when we’re allowed to.

We keep a company’s data while its account is open, because time and pay records are often needed for years. When an owner asks us to delete the company, we delete its data, except billing records we must keep by law.

• You can see and change your name, language and password on the Me page in the app.
• Your time records belong to the company you work for, so ask the office first about corrections. You can also write to us at chris@occasioroasters.com to see, correct or delete your information, and we’ll work with your company to do it.
• You can turn off location for the app in your phone’s settings. Clocking in may then need a reason for the office.

Connections are encrypted, passwords are hashed, and each company’s data is walled off from every other company’s inside the database itself. No system is perfect; if something goes wrong that affects your information, we’ll tell you.

The service is for businesses and their crews. It isn’t meant for children under 13, and we don’t knowingly collect their information.

If we change this policy in a way that matters, we’ll update the date above and tell company owners by email or in the app.

Privacy questions or requests: chris@occasioroasters.com.