Privacy

How Auto Timesheets handles personal information. Last updated: [date].

Who we are

Auto Timesheets is run by [legal name and ABN] ("we"). You can reach us at [contact email].

Two kinds of people use this

Businesses (builders and trades) sign up, add their crew and jobs, and approve time. Workers are people those businesses add, who use the phone app. The business decides who it records and why; we handle the information on its behalf.

What we collect

• From a business: the account email, the business name, and the names, mobile numbers and payroll IDs it enters for its crew.
• From a worker's phone: when the phone crosses the edge of a job site (enter or leave), the time, and the phone's location at that moment. We do not collect a continuous track of where someone goes. We also keep a short diagnostic log of what the app did (for example that it woke up or sent something), kept for 30 days.
• Hours: the time worked at each job, and any correction to it with the reason.
• From our public site: what you type into the contact form (name, email, business, crew size, message). It is stored and sent to the person who answers enquiries.

Why

To record hours at jobs, let the business check and approve them, and send them to its payroll. We do not sell personal information and we do not use location for advertising.

Who sees it

A worker sees their own time. A business sees its own crew's time. Nobody at one business can see another's. Our staff see business data only to support the service [lawyer to confirm wording].

Services we rely on

We use these services to run Auto Timesheets. Some are run by companies that may handle information outside Australia:

• Supabase: the database (hosted in Sydney) and sign-in. Holds account details, workers, sites, recorded time and corrections.
• Fly.io: runs the server that the website and phone app talk to (Sydney region).
• Vercel: hosts the website and the office web app [region to be confirmed].
• Google Maps Platform: address search. It receives the address text a business types when setting up a site, not worker information.
• Esri: the satellite map pictures shown when a business places a site's pin. The map provider sees which area is being viewed.
• The service that receives contact-form notifications [name it, e.g. Slack]: receives what you type into the contact form on this site.

How long we keep it

[Period, set with advice]. Approved time is kept as a record and is corrected by adding a new entry, not by changing the old one.

Your rights

You can ask us what we hold about you, and ask for a correction. A worker should ask their employer first, because their employer decides what is recorded. [Complaints process, and the Office of the Australian Information Commissioner.]