Privacy Policy
Last updated: 14 ມິຖຸນາ 2026
Clockcake ("we", "us") provides time-tracking, scheduling, leave and payroll software. This policy explains what personal data we collect, how we use it, and the choices you have. When your employer manages a workspace in Clockcake, your employer is the data controller and we act as their processor.
Information we collect
Account details (name, email, hashed password), workspace and employee records, clock-in and clock-out times and breaks, location and IP data when geofenced or IP-restricted check-in is enabled, billing details handled by our payment provider, and basic device and usage information. We do not sell your personal data.
How we use information
To provide and operate the service — sign-in, time tracking, scheduling, leave and payroll, billing, customer support, security and fraud prevention — and to maintain, analyze and improve Clockcake.
Cookies and analytics
We use strictly necessary cookies to keep you signed in and to remember your language and theme. With your consent, we use analytics cookies to understand how the product is used. You can accept or reject analytics at any time.
Sharing and service providers
We share data only with processors who help us run the service under contracts that protect it: payments via Paddle (our Merchant of Record), hosting and database via Vercel and Supabase, and email delivery. We may also disclose data when required by law.
Data retention
We keep personal data while your account is active and as needed to provide the service, then delete or anonymize it — unless a longer retention period is required by law, such as for tax and payroll records.
Security
We protect data with encryption in transit, hashed passwords, access controls and audit logging. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
International transfers
We may process data in countries other than your own. Where required, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your data, to object to or restrict processing, and to withdraw consent. To exercise these rights, contact us — or your employer, who controls workplace data.
Children
Clockcake is a workplace tool and is not directed to children under 16. We do not knowingly collect personal data from children.
Changes to this policy
We may update this policy from time to time. We will revise the "last updated" date above and, for significant changes, notify you in the app or by email.
Contact us
Questions about this policy or your data? Email us at i@clockcake.me.
This Privacy Policy is provided in several languages for your convenience. If there is any conflict between translations, the English version prevails.