Privacy Policy

Last updated: 14 August 2026

ImOnSite ("we", "our", "the app") provides a time-tracking, leave management, and payroll-support tool used by companies ("customers") and their employees. This policy explains what data we collect through the ImOnSite mobile app and admin web app, why, and what control you have over it.

1. What we collect

Account information — name and email address, used to create your account and identify you within your company's ImOnSite workspace.
Employment data — your role (admin or employee), employment start date, active/deactivated status, and which company you belong to.
Clock-in/out records — the date and time of each clock event.
Location — when you clock in or out from the mobile app, we capture your device's GPS coordinates and convert them into a human-readable address (using your device's own location services), so your employer can verify where work was performed. Location is only captured at the moment of a clock event — the app does not track your location in the background or at any other time. Capturing location is best-effort: if you deny the permission, the clock event still records without it.
Leave data — leave balances and the accrual policies your company configures for your leave types (annual, sick, etc.).
Billing information (company admins only) — if you set up a company and subscribe, your subscription status, seat count, and plan are stored by us. Payment card details are never sent to or stored by us — subscriptions are handled entirely by Stripe, our payment processor.

2. Why we collect it

Everything above is collected solely to operate the time-tracking, payroll, and leave management service your employer has set up: recording hours worked, verifying work location, managing leave entitlements, generating timesheets, and billing the company for its subscription. We do not use your data for advertising, and we do not sell your data to anyone.

3. Who we share it with

Your company's admin(s) — the people who manage your employer's ImOnSite account can see your clock records, location captured at clock events, timesheets, and leave balances. This is the core purpose of the app.
Supabase — our database, authentication, and hosting provider. All data described above is stored in our Supabase project.
Stripe — processes company subscription payments. We never see or store your card details.

We do not share your data with any other third party, and never for marketing purposes.

4. Your rights

You can view your own clock history, hours, and leave balances at any time in the mobile app. You can delete your account and all of your personal data at any time:

Employees — open the ImOnSite mobile app, go to the Settings tab, and tap "Delete my account."
Company admins — from the admin dashboard's "Delete account" option. If you're the owner of an active company, you'll be asked to transfer ownership or close the company first, since deleting your account would otherwise orphan your employees' access.

Deleting your account permanently removes your profile, clock records, and leave data. A small amount of audit-trail history may be retained by your (former) employer in anonymized form — for example, a record that "an edit was made on this date, for this reason" — but it will no longer be linked to your name or account once deleted.

5. Data retention

We retain your data for as long as your account is active. If your account is deleted, your personal data is removed immediately as described above. Your employer may separately be required to retain payroll-related records (like total hours worked) for tax or employment-law purposes even after you delete your account — that obligation belongs to your employer, not to ImOnSite.

6. Children's privacy

ImOnSite is a workplace tool intended for use by employees of our customers. It is not directed at, and should not be used by, children.

7. Changes to this policy

If we make material changes to this policy, we'll update the "Last updated" date above. Continued use of the app after a change constitutes acceptance of the updated policy.

8. Contact us

Questions about this policy or your data? Contact your company's ImOnSite admin, or reach us directly at contact@rig360.app.