Privacy Policy

Draft: the operator's legal name and contact details haven't been filled in yet.

This policy explains what Cronta collects, why, who can see it and how long it's kept. It's run by the operator of this service ("we", "us").

Two kinds of people use the Service

• Businesses who create an account, and the people they invite to their dashboard. For their own account details, we decide how the data is used.
• Employees of those businesses. For employee time records, we work for the employer: we process them only to provide the Service to that employer and as it instructs. Questions about your records? Ask your employer first; you can also contact us.

What we collect

• People who sign in to the dashboard: name, sign-in name, password (stored only as a one-way scrambled hash), two-step sign-in secret, the devices you're signed in on (device type, approximate network address, last active), and email addresses for alerts if you add them.
• Employees: name, phone number, a PIN (stored only as a hash), punch times (clock in, breaks, clock out), shifts scheduled, requests to fix time, and any payroll ID and pay rate the employer enters.
• Employees' own email, only if they add it: when an employer switches it on, an employee can add an email in the app to get notices from that employer (schedule, shift swaps, time off). It's optional, used for nothing else, never shown in full to the employer, and confirmed from the mailbox before anything is sent. Each email has a link to stop them. Removing it in the app erases it at once.
• Location, only at the moment of a punch. When you tap a clock button, your phone shares its location once so the Service can check you're at the store. We keep that point and its distance from the store. Your location is never tracked between punches. The store's own clock-in device reports its location every 15 minutes while it's on, to confirm it hasn't left the store.
• Photos, only if your employer turns them on: a small picture taken by the store device when you clock in there with your PIN. Kept 60 days, seen only by the employer's managers, and never used for face recognition or any biometric identification.
• Billing: handled by Stripe. We keep the Stripe customer and subscription IDs and the plan status. We never see or store card numbers.
• Technical: server logs (time, address, page) kept briefly to keep the Service secure and fix problems.

How we use it

To run the Service: record and add up time, show schedules, prepare payroll files, send alerts you asked for, keep accounts secure, prevent fraud (like clocking in from somewhere else), and support you. We don't sell personal information, and we don't use it for advertising.

Cookies

Only the ones needed to keep you signed in and to recognise a store's clock-in device. No advertising or tracking cookies.

Who else handles data for us

• Vercel: hosting the website and app.
• Supabase / Neon: the database where the data is stored (USA).
• Stripe: payments.
• Resend: sending emails: alerts and notices a business turns on, and account emails.
• OpenStreetMap (Nominatim): turning a store address into a map point. Only the store's address is sent.

They may use the data only to provide their service to us. We may also share information if the law requires it, or to protect people's safety or our rights; and with a buyer if the business is sold, under this same policy.

Who can see it inside a business

Each business's data is kept apart from every other business's. Inside a business, people with Full access or Admin see everything; store managers see their store's people and hours but not pay; employees see only their own records.

How long we keep it

• While the business's account is open. Employers often must keep payroll records for several years; they can download everything at any time.
• Photos: 60 days. Sign-in records: about a month after they end.
• After a business closes its account, we delete its data within 30 days, except copies in backups (removed as they expire) and anything we must keep by law.

Security

Encrypted connections, hashed passwords and PINs, two-step sign-in for the dashboard, sign-in limits against guessing, separate data for each business, and a history of every change to time records. Documents, ID numbers and two-step sign-in secrets are also encrypted with AES-256 before they're saved, with keys kept separately from the database. More on our Security page.

Your choices and rights

You can see and correct your information (employees: ask your employer; dashboard users: in the dashboard). Depending on where you live (for example California), you may have rights to know, access, correct or delete personal information and not to be discriminated against for using them. To make a request, contact your employer or us; we'll answer within the time the law requires.

Children

The Service is for workplaces and isn't directed to children under 13.

Changes

If we change this policy in a significant way, we'll tell businesses in the Service or by email before it applies.

Contact

The operator of this service · contact address not set yet