Privacy Policy
Last updated July 2026
This page describes, in plain terms, what data Punchcard actually collects and how it's actually used - it's a good-faith description of our real practices, matched to how the product is built, not generic boilerplate. It isn't a substitute for your own legal advice about your specific obligations.
What we collect
From admins: name, email address, a hashed password (we never store or see your actual password), and your company name.
From employees: name, email address, and a hashed password. While clocked in, we also record GPS coordinates at clock-in, clock-out, breaks, and periodically (at most every 2 minutes) during the shift. Employees can also add shift notes and task titles, which are visible to their company's admins.
We don't collect payment card details ourselves - those go directly to Stripe, our payment processor, and never touch our servers.
Why we collect it
To operate the service your company signed up for: verifying and recording clock in/out location, tracking shift time and breaks, and generating the payroll reports admins export. Location data specifically exists to verify punches actually happened where an employee says they did - it's a core, disclosed part of the product, not incidental tracking.
Who we share it with
Your card details go directly to Stripe, our payment processor - you'll see their checkout page when you pay. A handful of trusted infrastructure providers help us run the service behind the scenes, each bound by its own data protection terms. We don't sell data, and we don't share it with anyone for advertising or marketing.
How long we keep it
Your company's data is kept for as long as the account is active. If an admin cancels the subscription, every employee record, every shift and location entry, and the company record itself is permanently deleted immediately - there's no retention period or recovery window after that point.
Your rights
Depending on where you're located, you may have rights to access, correct, export, or delete your personal data. In this product specifically:
- Access & portability - admins can export full shift history (with location data) as PDF or CSV at any time from Reports; employees can do the same for their own hours from My time.
- Rectification - admins can correct shift records; every correction is logged with who made it and why, not applied silently.
- Erasure - canceling the subscription erases all company data immediately. For an individual request outside of that, contact us below.
Contact
Questions about this policy or a request about your data: Contact