Privacy Policy
OpsPilot LLC ("we," "our," or "us") operates Hour by OpsPilot. This Privacy Policy explains how we collect, use, and protect information about users of the Service.
1. Information We Collect
- Business information: Company name, owner name, email, and location details entered during setup
- Employee information: Name, phone number, store/location, role, and 4-digit PIN
- Time and attendance data: Clock-in/out timestamps, breaks, schedules, and overtime records
- Location data: GPS at clock-in only when geofencing is enabled — not tracked continuously
- Webcam photos: Single photo at clock-in for identity verification, if enabled by business owner
- SMS consent: Employee opt-in preference and consent timestamp
- Audit records: Logs of time entry edits and accountability events
2. How We Use Your Information
- Operate and maintain the Service
- Calculate hours worked and generate payroll reports
- Send work-related SMS and push notifications to opted-in employees
- Verify clock-in location when geofencing is enabled
- Maintain audit logs for accountability and dispute resolution
- Improve and troubleshoot the Service
We do not use your information for advertising or marketing to third parties.
3. SMS Communications
Opt-out: Reply STOP to any message. You will receive a one-time confirmation and no further messages.
Help: Reply HELP to any message. Message and data rates may apply.
4. Multi-Tenant Data Isolation
Each business account's data is logically isolated. We do not share, cross-reference, or expose one customer's data to another. Business owners control who within their organization can access their data.
5. Data Storage and Security
All data is stored in Supabase with encryption at rest and in transit. We do not store credit card numbers, Social Security numbers, or sensitive financial credentials.
6. Data Sharing
- Within your business: Authorized managers can access scheduling and time records
- Service providers: Supabase (database), ClickSend (SMS), Netlify (hosting) — process data only as needed to deliver the Service
- Legal compliance: We may disclose information if required by law
We do not sell personal information.
7. Data Retention
Business owners control data retention within the platform. If an account is closed, associated data is deleted within 90 days unless otherwise required by law.
8. Your Rights
You may request access to, correction of, or deletion of your personal data by contacting support@opspilot.to.
9. Children's Privacy
Hour by OpsPilot is intended for users who are at least 16 years of age. We do not knowingly collect data from individuals under 16.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Continued use after changes are posted constitutes acceptance.
11. Contact Us
OpsPilot LLC
Email: support@opspilot.to