Privacy Policy

Clock Harbor is built to help small businesses manage work time responsibly. This policy explains the information the service uses and the choices available to account holders and workers.

Information we collect

We collect account and workplace information such as names, email addresses, company memberships, roles, work locations, schedules, time entries, attendance records, time-off requests, and messages submitted through the service. Company owners may also provide billing details to Stripe; Clock Harbor does not store full payment-card numbers.

Location information

When a worker uses location-secured timekeeping, the app may collect device location during a clock-in or clock-out, an approved active shift, or a location exception workflow. Location is used to compare the device with company work zones, document exceptions, and protect the integrity of time records. Permission can be controlled in device settings, though disabling it may prevent secured punches from being accepted automatically.

How information is used

Information is used to provide authentication, timekeeping, scheduling, attendance review, payroll-ready reporting, notifications, account support, fraud and abuse prevention, billing, and service reliability. We do not sell personal information.

Who can see workplace records

Access is controlled by company membership and role. Employees see their own permitted records. Authorized owners, admins, and managers may see records needed to operate the workplace. Private absence explanations are restricted more tightly than ordinary attendance status.

Service providers and retention

Clock Harbor uses service providers for cloud hosting, authentication, notifications, payments, and operational support. They process information only for those services. Operational records are generally retained for 365 days, subject to company settings, legal obligations, dispute preservation, backup schedules, and deletion requirements.

Your choices

You may review or update account information in the app, control device permissions, and request account deletion. A company may be required to retain employment or time records even after an individual account is removed. Contact hello@clockharbor.com with a privacy request.

Security and changes

We use access controls, encrypted connections, audit records, and service isolation designed to protect information. No system can guarantee absolute security. Material policy changes will be posted here with a revised effective date.