Privacy Policy

1. Scope

This Privacy Policy explains how TrinoTime Cloud processes information when people visit trinotime.com, create a workspace, join a customer workspace, or use workforce features such as attendance, schedules, overtime, leave, reports and payroll-ready timesheets.

Organizations that create TrinoTime workspaces decide what workforce information they place in the service. Depending on the context, that organization may be responsible for notices, lawful basis and employee-facing privacy obligations that apply to its workforce.

2. Information we process

Account and workspace information

• Name, work email, account identifiers and verification state.
• Workspace name, plan, role, team assignments and workspace settings.

Workforce operations data

• Server-timestamped attendance events and daily summaries.
• Schedules, overtime requests and decisions, leave requests/balances and operational reports.
• Payroll-ready timesheet settings, pay-profile values entered by authorized workspace administrators, corrections and locked snapshots.

Technical and billing metadata

• Request identifiers, limited operational diagnostics, device/browser information ordinarily provided with web requests and security/audit events.
• Subscription status and billing-provider identifiers needed to synchronize access. TrinoTime does not ask customers to enter payment-card numbers into the TrinoTime application.

3. How information is used

• Provide, secure and support the TrinoTime service.
• Authenticate users and enforce tenant, role, team and subscription boundaries.
• Calculate and display workforce operations such as worked time, schedule compliance, leave and payroll-ready summaries.
• Send invitations and workspace notifications selected by authorized administrators.
• Investigate failures, abuse, billing synchronization issues and security incidents.
• Improve onboarding and understand high-level activation milestones without using employee activity for advertising profiles.

TrinoTime does not sell customer workforce data to advertisers.

4. Service providers

TrinoTime relies on service providers to operate the platform, including Cloudflare for edge hosting/network services, Google Firebase for identity and database/storage services, Resend for transactional email, and Lemon Squeezy for subscription checkout and billing lifecycle services when enabled. These providers process data under their own terms and security controls.

5. Retention & deletion

Workspace information is retained while needed to provide the service, meet operational/security requirements, resolve disputes and comply with applicable obligations. Workspace Owners can download a bounded self-service operational snapshot and can submit a review-gated workspace deletion request from Settings.

6. Choices & rights

Depending on where you live and the role of your employer or organization, you may have rights to access, correct, export or request deletion of personal information. For workforce information controlled by your employer or customer organization, start with that organization. TrinoTime can assist authorized workspace administrators with platform-level requests.

7. Security

TrinoTime uses Firebase identity, server-side authorization through the Cloudflare Worker, tenant-scoped data paths, fail-closed browser database/storage rules, security headers, audit trails and role-limited administrative actions. No system can guarantee absolute security. See the Security page for the current architecture and reporting channel.

8. Changes to this policy

This policy may be updated as TrinoTime adds features, providers or legal requirements. Material updates will receive a revised effective date on this page.