This Privacy Policy explains how Production Pay Tracker ("we", "us", "our") collects, uses, and shares information in connection with Production Pay Tracker (the "Service"). By using the Service, you agree to this Policy.

1. Information we collect

Account information: name, email address, phone number, hashed password, employer/tenant identifier.
Payroll data you submit: time-clock punches, GPS coordinates of punches (when required by employer), lunch entries, jobs performed, commission amounts, paystub records, tax withholding elections.
Payment information: billing address and card details are collected and processed by our payment processor Stripe. We do not store full card numbers on our servers.
Log & device data: IP address, browser type, referring URL, and pages viewed, collected via server logs and cookies.
Communications: messages you send to support and email you receive from us.

2. How we use information

Operate, secure, and improve the Service.
Authenticate you and enforce role-based access.
Process billing and send transactional notices (receipts, trial-ending reminders, password resets).
Generate paystubs and reports on behalf of your employer.
Detect and prevent fraud, abuse, and security incidents.
Comply with legal obligations.

We do not sell your personal information, and we do not use your payroll data for advertising.

3. Who we share information with

Your employer: if you are an employee-role user, your employer administrators can see your time entries, jobs, and paystubs. This is inherent to the Service.
Service providers (sub-processors): Stripe (payments), Resend (transactional email), MongoDB Atlas (database hosting), and our object-storage provider. Each is contractually bound to only process data on our instructions.
Legal & safety: to comply with lawful requests from government authorities, court orders, or to protect rights, property, or safety.
Corporate transactions: in the event of a merger, acquisition, or asset sale we may transfer information subject to standard confidentiality protections.

4. Data retention

We retain account and payroll data for as long as your employer's account is active. If the account is terminated, data is exportable for 30 days, then deleted in the ordinary course (backups may persist for up to 90 additional days). We retain financial records for 7 years to comply with tax law.

5. Your rights

Depending on your jurisdiction (including California CCPA/CPRA, Virginia CDPA, Colorado CPA, Connecticut CTDPA, EU GDPR), you may have the right to:

Access, correct, or delete your personal information.
Object to or restrict certain processing.
Data portability (receive your data in a structured, machine-readable format).
Withdraw consent where processing is based on consent.
Lodge a complaint with a supervisory authority.

To exercise these rights, email privacy@productionpaytracker.com. We will respond within 30 days. We may need to verify your identity before fulfilling the request.

6. Security

We use industry-standard measures — encrypted transport (TLS), hashed passwords (bcrypt), least-privilege access controls, and audit logging — to protect your data. No system is 100% secure; you should use a strong unique password and enable device-level protection.

7. Children

The Service is not intended for individuals under 16. We do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it.

8. International data transfers

Our servers are located in the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US, which may have different data-protection laws than your country. By using the Service, you consent to this transfer.

9. Changes to this Policy

We may update this Policy from time to time. If we make material changes we will notify you via email and/or an in-Service notice. Continued use after the effective date of a change constitutes acceptance.

10. Contact

Data protection questions: privacy@productionpaytracker.com
General support: support@productionpaytracker.com
Production Pay Tracker
Richmond, Kentucky, United States

Attorney note: Confirm the state-specific rights list, retention windows, and sub-processor list against your actual vendor stack. If you serve EU/UK users, add a GDPR-specific "Legal basis" section.