Privacy Policy

What this policy covers

This policy explains how ClockBase handles personal information when you visit our website or use the ClockBase time tracking, workforce, payroll review, and payment-preparation services. If your employer or another organization provides your ClockBase workspace, that organization controls how your employment information is used and ClockBase processes it to provide the service.

Information we collect

• Account and identity details, such as your name, work email, employee number, contact details, country, and sign-in records.
• Work records, including shifts, breaks, departments, schedules, leave, notes, tasks, status updates, presence responses, and survey responses.
• Employment and payroll details, including placement dates, compensation terms, payout currency, pay frequency, paystubs, tax setup, deductions, and payment status.
• Technical and security information, such as IP address, browser and device information, notification subscriptions, audit events, and service logs.
• Information you send when you contact support or request access.

How we use information

We use personal information to:

• authenticate users and provide the ClockBase workspace;
• record and review time, work status, schedules, leave, and employee feedback;
• prepare payroll records, paystubs, exports, and authorized payment instructions;
• send service, security, registration, password-reset, and notification messages;
• protect accounts, investigate errors, maintain audit records, and meet legal obligations; and
• operate, troubleshoot, and improve the service.

ClockBase does not sell personal information or use employee work records for advertising.

Who can access information

Authorized administrators in your workspace can access employee records as needed to manage time, work, payroll, and account settings. We also use service providers that process information for us under their own contractual and security obligations:

• Vercel for application hosting and delivery;
• Supabase for authentication and database services;
• MailerSend for transactional email;
• Wise when an administrator uses an enabled payout or payment-preparation workflow; and
• browser and device push-notification services when you choose to enable notifications.

We may disclose information where required by law, to protect rights and service security, or as part of a business transaction subject to appropriate safeguards. Providers may process information outside your province or country, where it can be subject to local law.

Cookies and local storage

ClockBase uses strictly necessary authentication cookies and local browser storage for sign-in, security, interface preferences, notification state, and reliable operation. The public site does not currently use advertising cookies, marketing pixels, session replay, or third-party analytics. If that changes, this policy and any required consent controls will be updated before those tools are enabled.

Retention and safeguards

We keep information only for as long as needed to provide the service, meet the workspace administrator's documented requirements, resolve disputes, maintain security and audit records, and satisfy payroll, tax, accounting, or legal obligations. Retention periods vary by record type. We use access controls, encryption in transit, database security rules, server-side authorization, audit logging, and restricted administrative access appropriate to the sensitivity of the information.

Your choices and rights

You can review and update certain account information in ClockBase. For access, correction, deletion, or questions about an employment record, contact your workspace administrator first. You may also contact ClockBase. We will verify requests and respond as required by applicable law. Some records may need to be retained for payroll, tax, security, or legal reasons.

Contact

Questions or privacy requests can be sent to info@getclockbase.com. ClockBase is operated from British Columbia, Canada.