We hold your data to run your time clock, and for nothing else. We don't sell it, we don't show ads, and we don't track you around the web.
The employer collects the crew's information (names, PINs, punch times, pay rates) and is responsible for it under privacy law. We are the employer's service provider. Employees with questions about their records should ask their employer first; we help the employer answer.
We use Cloudflare to host the service and send email, and Stripe to take card payments. Data lives in Cloudflare's eastern North America region, which may be in the United States.
Passwords and PINs are stored scrambled, everything travels over HTTPS, and each business's data is kept apart from every other business's.
After an account closes we keep its data for 90 days so the employer can download it, then delete it.
Marketing email only if you ticked the box, with an unsubscribe link every time. Not for anyone under 16.
To see, correct or delete your information, or to complain, write to info@punchboo.com. We answer within 30 days.
This summary is here to help you read the policy. It is not legally binding; the full policy below is what counts.
1. Who we are and who this covers
Punchboo is run by 14886933 Canada Inc., 120 Oakdale Road, North York, Ontario M3N 1V9, Canada ("we", "us"). Our website is punchboo.com and the service runs at app.punchboo.com. Our privacy contact is info@punchboo.com.
This policy explains what personal information the service holds, why, who can see it, how long we keep it, and what you can do about it. It covers:
Account owners and managers: the people who sign up for a shop and run its office.
Employees: the crew whose punches are recorded. Their employer adds them to the account.
Visitors to punchboo.com, and people who email us or ask for a quote.
2. Employer data and our role
The business that creates a Punchboo account (the "employer") decides which employees to add, what to record and how to use the records. Under Canadian privacy law, the employer is the organization accountable for its employees' information. We are the employer's service provider. We process that information only on the employer's instructions and only to run the service, and we never use it for our own purposes.
This means that:
the employer is responsible for telling employees that their time is recorded by Punchboo, and for having the right to collect what it enters;
an employee who wants to see, correct or delete their records should ask their employer, who controls the account. We help the employer respond, and we will pass on any request we receive directly (see section 12);
the employer is responsible for keeping time records as long as employment-standards law requires. We keep data only as described in section 9.
3. What we collect and why
Account owners and managers
Information
Why we have it
Name, email address, password (stored hashed, never readable)
To create your login, sign you in and send account emails
Shop name, province, time zone, logo, pay-period and overtime settings
To run your time clock the way you set it
Billing name, email and card details (held by Stripe, not us)
To charge your plan and send invoices
Login connection address (IP) and browser type
Security: to spot unusual logins and limit repeated attempts
Audit log of changes made in the office (who changed what, when)
So the employer can see who edited a shift or a setting
Your marketing choice (the opt-in box at sign-up)
So we only send news if you asked for it
Employees (entered by the employer)
Information
Why the service has it
Name and display colour
So the tablet shows who is punching and the office can prepare hours sheets
PIN (stored hashed, never readable)
So nobody can punch for someone else
Punch-in and punch-out times, lunches and breaks, and any edits with who made them
This is the time record itself
Hourly rate, if the employer enters one
To estimate gross wages for the employer
Email address, optional
For invitations and notices the employer chooses to send
Notes the employer writes
Whatever the employer needs to remember about the person
The tablet's connection address (IP) at each punch
For the optional "shop Wi-Fi only" lock and to spot a tablet used from somewhere else
We do not collect location, photos, fingerprints or anything from employees' personal phones. A tablet only records a punch when someone taps their name or enters their PIN.
Everyone
Emails you send us (support, quotes, privacy requests): we keep them to answer you and to keep a record of what was agreed.
Website visits: we use Cloudflare Web Analytics on punchboo.com. It is cookie-free, it does not identify you, and it only tells us things like how many people visited a page. We do not use Google Analytics or any advertising trackers.
Server logs: Cloudflare keeps short-lived technical logs (addresses, pages requested, errors) to run and protect the service.
4. How we use it
We use the information above only to:
run the time clock and the office for your shop;
sign you in, keep your account secure and stop abuse;
meet our legal obligations, such as tax and accounting rules.
We do not sell personal information, rent it, or share it with advertisers. We do not profile you, we do not build marketing lists from employee data, and we do not use your data to train artificial-intelligence models.
5. Who we share it with
Your shop only. Every record is tagged with your account, and the service only ever shows an account its own records. One business can never see another's. We test this.
Owners and managers on your account see everything in your office. Employees see only their own times on the tablet ("My hours"), never pay rates or anyone else's details.
Our staff. A small number of people who run the service can access data to fix a problem or when you ask for help. They do not browse customer data otherwise.
Service providers that work for us (see the table). They may only use the data to provide their service to us, under their own privacy and security commitments.
The law. We will disclose information if a court order or a law requires it. Where we are allowed to, we will tell the account owner first.
A new owner of our business. If we sell or merge the business, your data would move to the new owner under this policy. We would tell you by email before that happens.
Provider
What they do for us
What they see
Cloudflare, Inc.
Hosting, the database, security, backups, sending our emails, website analytics
Everything stored in the service, in encrypted and access-controlled form; email addresses and the content of the emails we send
Stripe, Inc.
Card payments, invoices and the billing portal
The billing contact's name and email, the card details you enter on Stripe's pages, and your plan. We never see your full card number.
The service and its database are hosted by Cloudflare. Your data is stored in Cloudflare's eastern North America region, which may be in the United States, and it is processed at Cloudflare's global network edge when the service handles a request. Backups are kept by Cloudflare in the same region. Stripe and Google also hold the data described above on their own systems, which may be outside Canada.
Information stored outside Canada is subject to the laws of the country it is in, and could be reached by that country's authorities under those laws. We choose providers with strong security and privacy commitments, and we use contracts and technical measures to keep your data protected to a standard comparable to the one it has in Canada.
7. Cookies and browser storage
What
Where
Why
Session cookie (HttpOnly, secure)
The office, on the browser you log in with
Keeps you logged in. It expires on its own and is deleted when you log out.
Device cookie
The tablet
Keeps the tablet connected to your shop after setup
Browser storage (local storage)
The tablet and the office
Punches saved while the internet is down, your theme and display preferences
That is all. No advertising or tracking cookies, no third-party cookies, and no analytics scripts that identify you. If you block cookies, the office cannot keep you logged in and the tablet cannot stay connected.
8. Emails we send
Service emails are needed to run your account: confirming your address, password resets, invitations, receipts and billing notices, the alerts you turn on (such as a forgotten punch-out), and important notices about your account or these terms. You get these as long as you have an account. They are not marketing.
Product news is sent only if you ticked the optional opt-in box, which is unticked by default. Every such email has an unsubscribe link, and we act on it within 10 business days, usually at once. You can also change your choice by emailing us.
We send email through Cloudflare. We follow Canada's anti-spam law (CASL).
9. How long we keep it
While your account is open: as long as the employer keeps it. Employers in Canada generally need time records for about three years, so the service keeps punches on record until the employer deletes them.
After an account closes (closed by you, or ended by us): 90 days, so the employer can still download its records. We email the account owner about 30 days before deletion. After 90 days the account and all its data are deleted and cannot be recovered. Backups age out after that.
When the employer turns a person off in the office, that person's name and hours stay in the account, because the employer needs them for its records. They are deleted with the account.
Login and PIN attempt counters: about one day.
Office sessions: until you log out or they expire.
Emails and support requests: up to two years after the last message, so we can follow up on what was agreed.
Billing records (invoices, receipts): as long as Canadian tax law requires, generally six years after the end of the year they relate to. Stripe keeps its own records under its policy.
10. How we protect it
Everything travels over encrypted connections (HTTPS). There is no unencrypted version of the service.
Passwords are hashed with PBKDF2 and PINs are hashed too, so even we cannot read them.
Sessions expire on their own, and logging out ends them at once. Login and PIN attempts are rate-limited.
Each business's data is isolated by account, and we test that one account can never reach another's.
The office keeps an audit log of who changed what.
The service runs on Cloudflare with its security protections and backups.
Card details go straight to Stripe and never pass through our servers.
No system is perfect. If we learn of a breach of security safeguards involving your information that creates a real risk of significant harm, we will notify the affected account owners as soon as feasible, report it to the Office of the Privacy Commissioner of Canada, and keep a record of it, as the Personal Information Protection and Electronic Documents Act (PIPEDA) requires. Where the breach involves employees' information, we will notify the employer and help them inform their employees.
11. Your rights and choices
If you are an account owner or manager, you can:
See and correct your account and shop information in the office at any time.
Download your records: print any timesheet, or on the Punchboo plan download Excel/CSV files from the office. If you can't get a file from the office, email and we will send one.
Close your account by emailing us from the owner's address. Your data is then kept for 90 days and deleted (see section 9).
Withdraw consent to marketing email at any time with the unsubscribe link, or by emailing us. You can also withdraw consent to other uses, but then we may not be able to keep providing the service.
Ask us what personal information we hold about you, how we use it, and who we have shared it with.
Send any request to info@punchboo.com. We will confirm who you are first, then answer within 30 days. If we need more time, or if the law lets us refuse part of a request, we will tell you why. There is no charge.
12. If you are an employee
Your employer added you to Punchboo and controls the account. Under privacy law your employer is responsible for your information, and we hold it on their behalf.
See your own times: tap "My hours" on the tablet to see your punches for this pay period and the last one. It shows times only, never pay.
Access, correction or deletion: ask your employer. They can show you, print or download your full record, correct a punch, or turn you off in the account.
If you write to us instead, we will pass your request to your employer and help them respond. We cannot change or delete your records without the employer's instruction, because they are the employer's legal records of your work.
Your PIN is yours. Don't share it. If you think someone else knows it, ask your employer to change it.
13. Children
Punchboo is for businesses. Nobody under 16 may create an account or be a user (owner or manager) of one. An employer may record the time of an employee under 16 only where that is lawful; the employer is responsible for that decision.
14. Privacy laws that apply
PIPEDA. We follow the Personal Information Protection and Electronic Documents Act, Canada's federal private-sector privacy law, and the provincial laws that apply to the employers who use the service.
Quebec. We do not accept sign-ups from Quebec yet. Quebec's private-sector privacy law (Law 25) and its French-language requirements are not yet supported. We will update this policy when that changes.
CASL. Canada's anti-spam law covers how we send email (see section 8).
Outside Canada. The service is built for Canadian businesses. If you use it from elsewhere, you do so on your own initiative, and Canadian law applies.
15. Changes to this policy
We may update this policy from time to time. For a change that matters, such as a new provider or a new use of data, we will email account owners and show a notice in the office at least 30 days before it takes effect. For minor changes, we update the date at the top. Earlier versions are available on request.
16. Contact and complaints
Our privacy contact handles questions, requests and complaints about this policy:
14886933 Canada Inc. (privacy contact) 120 Oakdale Road, North York, Ontario M3N 1V9, Canada info@punchboo.com
If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca, or to the privacy commissioner of your province.