Privacy Policy

Last updated: March 21, 2026

MyTimeKeep ("we", "us", "our") operates the MyTimeKeep platform (the "Service"). This page informs you of our policies regarding the collection, use, and disclosure of Personal Data when you use our Service and the choices you have associated with that data.

1. Data Controller and Processor

MyTimeKeep acts as a data processor on behalf of each company (the "data controller") that uses our Service. Each company that creates an account on MyTimeKeep is the data controller for the employee data they manage through the platform.

2. Information We Collect

We collect the following types of personal data:

Account Information: Company name, owner name, email address, and password when you sign up.
Employee Data: Names, email addresses, work schedules, leave balances, timeclock entries, and other employment-related information entered by the data controller.
Payment Information: Credit card details are processed and stored by Stripe, our payment processor. We do not store credit card numbers on our servers.
Usage Data: IP addresses, browser type, pages visited, and timestamps for security and audit purposes.
Cookies: Essential session cookies to keep you signed in. No tracking cookies are used.

3. How We Use Your Data

We use the collected data for the following purposes:

To provide and maintain our Service
To manage your account and subscription
To process payments via Stripe
To send notifications about your account (password resets, leave approvals, etc.)
To detect, prevent, and address security issues
To comply with legal obligations

4. Data Storage and Security

Your data is stored on secured servers. We implement the following security measures:

AES-256 encryption for sensitive data at rest
TLS/SSL encryption for all data in transit
Two-factor authentication (2FA) support
Per-tenant database isolation — each company's data is stored in a separate database
Audit logging of administrative actions
Brute-force protection and rate limiting on login

5. Data Sharing

We do not sell, trade, or rent your personal data. We may share data with:

Stripe: For payment processing (Stripe Privacy Policy)
Law enforcement: If required by law or to protect our rights

6. Your Rights (GDPR)

If you are in the European Economic Area (EEA), you have the following rights:

Right to Access: You can request a copy of all personal data we hold about you. Employees can use the "Download My Data" feature in their profile.
Right to Rectification: You can update your personal data through the application or request corrections from your administrator.
Right to Erasure: You can request deletion of your account and all associated data. Employees can submit a deletion request through their profile.
Right to Restrict Processing: You can request that we limit how we use your data.
Right to Data Portability: You can receive your data in a structured, machine-readable format.
Right to Object: You can object to our processing of your personal data.

7. Data Retention

We retain personal data for as long as your account is active or as needed to provide services. When an account is deleted, all associated data (including the tenant database) is permanently removed. Audit logs are retained for up to 3 months for security purposes.

8. International Data Transfers

Your data may be transferred to and processed on servers located outside your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

9. Children's Privacy

Our Service is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: privacy@mytimekeep.com