Privacy Policy

TimeLogHub is run by Altasoft Software Services & IT Inc. (“we”, “us”), based in Edmonton, Alberta, Canada. This policy covers the TimeLogHub website and dashboard at timeloghub.com, the TimeLogHub app for iPhone and iPad, and the API that connects them.

TimeLogHub is used by businesses (“customers”) to record when their crew or members clock in and out. The customer decides who is added and what is recorded. For worker information, the customer is responsible for it and we handle it on their behalf and on their instructions.

Account owner (the manager who signs up): name, email address, password (stored only as a one-way hash), company name, and optional contact person, address, phone and logo.

Workers added by the manager: name, an optional picture, and a 4-digit PIN used to clock in on the device. Workers don't create accounts and don't sign in.

Time records: clock-in and clock-out times, the job site, total hours, notes a manager adds, and which device or dashboard the punch came from.

Device location: if location access is allowed on the clock-in device, the device’s approximate position at the moment of a punch is saved with that punch so the manager can confirm where it happened. We don’t track location in the background, and we don’t track workers’ personal phones.

Billing: subscription status, plan and dates. Card details are entered on Stripe’s page and stay with Stripe; we never see or store full card numbers.

Technical data: server logs such as IP address, browser or device type, and error reports, used to keep the service running and secure.

We don’t take photos, record audio, or collect contacts, health or biometric data.

• To run the service: record punches, sync devices, and show timesheets, overtime and payroll exports to the manager.
• To manage your account and subscription, and to send service emails such as password resets and billing notices.
• To keep the service secure, prevent abuse, and fix problems.
• To meet legal, tax and accounting obligations.

• We don’t sell personal information.
• We don’t show ads or use ad trackers, and the app doesn’t track you across other companies’ apps or websites.
• We don’t use worker data for our own purposes beyond running the service for the customer.

Only the service providers we need to run TimeLogHub, each bound to protect the data:

• Hostinger hosts our servers and database.
• Stripe processes subscription payments.
• Our email provider sends account and billing emails.

We may also disclose information if the law requires it, to protect people’s safety, or as part of a merger or sale of the business, in which case this policy continues to apply.

Some providers may store or process data outside Canada, including in the United States or the European Union, where it is subject to local law.

The clock-in device keeps a local copy of the company’s workers, job sites and recent punches so it works without internet, and uploads punches when a connection is available. Signing out on the device removes this local copy. Anyone with access to the device in manager mode can see this information, so keep the manager PIN private.

We keep account and time records while the account is active so the business has its payroll history. When an account is closed we delete or anonymize its data within 90 days, except billing records we must keep for tax law, which are kept for the period the law requires. Backups roll off on their normal schedule.

Data travels over encrypted connections (HTTPS). Passwords are hashed, each company’s data is kept separate from other companies’, and access to our servers is limited. No system is perfectly secure, but we work to protect your information and will notify affected customers of a breach as the law requires.

Managers can view, correct, export and delete their workers and time records in the dashboard at any time. To get a copy of your data, correct it, or close your account and delete its data, email admin@altasofttech.com from the account’s email address.

If you are a worker, please contact the business that added you first, because they control your records. We’ll help them respond. Depending on where you live, you may have the right to access, correct or delete your information, or to complain to your privacy regulator.

Accounts are for businesses and organizations and must be opened by an adult. If an organization adds people under 18 (for example students), the organization is responsible for having the authority and any consent needed to do so. We don’t knowingly collect information directly from children.

We’ll post any change here and update the date at the top. If a change is significant, we’ll let account owners know by email or in the dashboard before it takes effect.