ClockWorkPrivacy Policy
Last updated September 28, 2026
ClockWork (clock-work.app) is staff scheduling and time-clock software made by Central Trade LLC (“we”, “us”). Businesses (“employers”) use it to schedule their staff, record work time, and share schedules and hours with their employees. This policy explains what information ClockWork holds, why, who else receives it, and how long it is kept.
When an employer uses ClockWork, the employer decides what information about its staff goes into it and how it is used; we handle that information on the employer’s behalf. If you work for a business that uses ClockWork, your employer is the first place to ask about your information. You can also contact us.
What we collect
- Manager and owner accounts: name, email address, username, phone number, and a password (stored only as a one-way hash) or passkey.
- Information employers enter about their staff: names, job roles, phone numbers, schedules, preferred language, kiosk PINs (stored as a one-way hash; an employer may also keep an encrypted copy that only its owners and admins can view), and pay rates (visible only to managers the employer authorizes).
- Work time: clock-in and clock-out times, breaks, and any corrections, with who made them.
- Kiosk photos: if an employer turns this on for a store iPad, it takes one photo when an employee clocks in and one when they clock out. Photos are deleted after 30 days. An employer can have them sent to its managers’ Telegram group, where our deletion does not reach.
- Face and fingerprint (optional): an employee can choose to sign in at the kiosk with their face or fingerprint, and is asked separately first. For face sign-in we keep an encrypted face template — never the photos used to create it — and delete it when the employee is removed. Fingerprints stay inside the fingerprint reader; ClockWork stores only which numbered place in the reader belongs to which employee.
- The ClockWork app for employees: the phone number used to sign in, anything the employee chooses to add about themselves (the name they go by, email, home address, emergency contact), when they accepted our monitoring notice, and the sign-in codes we text and when they are used.
- Telegram: if an employer connects the ClockWork Telegram bot, the messages exchanged with it.
- Technical information: cookies that keep you signed in, and the server logs our hosting provider keeps (such as IP address and browser type). We do not use advertising or analytics trackers.
How we use it
To provide ClockWork: schedules, the time clock, hours for payroll, reports, and the messages an employer asks us to send. To keep it secure: preventing misuse, and an audit log of who changed what. To provide support, and to bill employer accounts. We do not sell personal information, and we do not use it for advertising.
Text messages (SMS)
ClockWork texts employees only to send an invitation to join the ClockWork app, when their manager invites them with their agreement, and one-time sign-in codes that the employee requests. Message frequency varies. Message and data rates may apply. Reply STOP to opt out and HELP for help. See our Text Message Terms.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the categories of sharing described in this policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Who receives it
- The employer and the managers it authorizes, each within the permissions the employer gives them.
- Service providers that run ClockWork for us, only to do that work: Vercel (hosting), Neon (database), Twilio (text messages), Telegram (bot messages, if the employer connects it), Stripe (billing for employer accounts — we never store card numbers), and Anthropic (the Remi assistant, which answers a manager’s questions using only what that manager can already see).
- When the law requires it, or to protect people from harm.
How long we keep it
- Work time records: at least 36 months, or longer if the employer chooses, because labor laws require these records.
- Kiosk photos, and records of face sign-in attempts: 30 days.
- Face templates and employee app accounts: until the employee is removed, or sooner if deleted. The record that an employee joined the app and accepted the notice stays in the audit log.
- Sign-in codes stop working after 5 minutes.
- Manager accounts: while the employer’s account is open.
How we protect it
Connections are encrypted (HTTPS). Passwords and PINs are stored as one-way hashes; recoverable PIN copies and face templates are encrypted. Each employer’s information is kept separate, including by controls in the database itself, and changes are recorded in an audit log.
Your choices
- Employees can ask their employer to see, correct or delete their information, and can edit their own details in the ClockWork app.
- Anyone can stop our texts by replying STOP.
- Face and fingerprint sign-in are optional; the PIN always works.
- Managers can update their account under Account.
- You can write to us at rasul@centraltradellc.com.
Children
ClockWork is for businesses and their employees. It is not directed to children under 13.
Changes
We will post any change here with a new date, and show significant changes in the app.
Contact
Central Trade LLC · rasul@centraltradellc.com