Privacy Policy

We collect and process only the information needed to provide GeoTimeKeeper to your company:

• Account information. Name, email address, and password hash for each management user who signs into your company account.
• Company information. Company name, timezone, workweek start day, and time-rule preferences chosen by an authorized administrator.
• Worker information. Worker names and identifiers that your administrators enter so workers can clock in and out.
• Timekeeping records. Clock-in and clock-out times, durations, and whether each entry was created by a worker on a device or added/corrected by an administrator.
• Location information. Site names and geofence coordinates that you define, plus optional location data captured when a worker clocks in or out within a geofence.
• Google Drive connection. With your explicit consent, we store a per-company OAuth authorization that lets GeoTimeKeeper create report files in the Google Drive folder you select.

GeoTimeKeeper uses Google Drive access for one purpose only:

• To let an authorized administrator pick a destination folder in your Google Drive.
• To save payroll/time reports that you or your scheduled reports request to that folder.

We do not use Google user data for advertising. We do not sell Google user data. We do not share it with third parties except as necessary to operate the requested file delivery (for example, transmitting a generated report to Google Drive on your behalf).

GeoTimeKeeper's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data is stored in a multi-tenant cloud database with row-level access controls. Each company's workers, time records, report setups, schedules, and Google Drive connection are logically separated from those of other companies. Management users must authenticate before accessing company data.

We encrypt data in transit using TLS. Google Drive authorization tokens are encrypted at rest and are never returned to the browser, exposed in URLs, or logged.

We retain timekeeping records, report setups, schedules, and delivery history while your company account remains active so you can continue to run payroll and review historical activity. If your company requests deletion and confirms the request, we will delete or anonymize the company's data in accordance with applicable law and our obligations.

An authorized company administrator can disconnect Google Drive at any time from the Reports screen in GeoTimeKeeper. Disconnecting removes GeoTimeKeeper's stored access token and stops scheduled report deliveries to Drive.

You can also revoke access directly through your Google Account permissions page. Revocation there is independent of GeoTimeKeeper and will cause scheduled Drive deliveries to fail until the connection is restored.

To request deletion of your company account and associated data, contact us at geotimekeeper@breaker1nine.biz. We will verify that the request comes from an authorized owner or administrator before processing it.

We may update this Privacy Policy as the service evolves. The latest version will always be available at this URL, and the "Last updated" date will reflect the most recent revision.

Questions about this policy or your data can be sent to geotimekeeper@breaker1nine.biz.