Privacy Policy

Account information. Your name, email address, and password (stored as a secure hash by our authentication provider), plus optional profile details you add such as a photo, phone number, job title, timezone, or birthday.

Workspace content. The information you and your workspace put into the Service: personnel records, org charts, projects, tasks, calendar events, messages, files, financial entries, travel plans, asset records, time-off requests, employment documents, and similar content. This can include personal information about workspace members — the workspace that enters it is responsible for having a lawful basis to do so.

Payment information. Paid subscriptions are processed by Stripe. We receive subscription status, plan, and billing-period details; we never receive or store full card numbers or bank credentials.

Usage and log data. Standard technical logs (such as IP address, browser type, and timestamps) and in-app activity records (which actions were taken on which records, shown to authorized workspace members as the activity log).

The Service uses cookies that are strictly necessary to operate — primarily to keep you signed in and remember your active workspace. We do not use advertising cookies or third-party ad trackers.

• To provide, operate, and secure the Service, including authentication and permissions enforcement.
• To process subscriptions and enforce plan limits.
• To send transactional email (invitations, confirmations, password resets).
• To respond to support inquiries and communicate important Service changes.
• To monitor for abuse and to debug and improve the Service.

We do not sell personal information, and we do not use your workspace content for advertising.

Some features use artificial intelligence to generate or summarize content on your request. When you use them, the relevant content is sent to our AI provider (OpenAI) to fulfill that request. We only send what is needed for the feature you invoked, and we do not use your content to train our own models.

Within your workspace. The Service is collaborative by design: content you contribute is visible to other members of your workspace according to the roles and permissions its Owner configures. Sensitive areas (such as personal employment records, pay placeholders, and private documents) are restricted to the individual and explicitly authorized roles.

Service providers. We share information with processors who help us run the Service: Supabase (hosting, database, authentication, file storage), Stripe (payments), OpenAI (AI features), and Google Maps (location features). Each processes data only to provide their service to us.

Legal. We may disclose information if required by law, to protect the rights and safety of users or the public, or in connection with a merger, acquisition, or sale of assets (in which case this Policy continues to apply to the transferred data).

We retain information for as long as your account or workspace is active and as needed to comply with legal obligations. Workspace Owners can permanently delete their workspace from within the Service — deletion is immediate and unrecoverable and removes the workspace’s content, including stored files. Workspace data can also be exported (JSON/CSV) from Settings at any time. To delete your individual account, or to request deletion of specific personal information, contact us at the address below.

Data is encrypted in transit, stored with reputable cloud infrastructure, and protected by row-level security and server-side permission checks so workspaces cannot read each other’s data. No system is perfectly secure — protect your credentials, use a strong unique password, and notify us immediately of any suspected unauthorized access.

Depending on where you live, you may have rights to access, correct, export, restrict, or delete your personal information. You can exercise many of these directly in the Service (profile settings, data export, workspace deletion). For anything else, email us and we will respond within a reasonable timeframe consistent with applicable law. Note that for information inside an employer’s workspace, we generally act as a processor — your workspace Owner controls that data, and we may direct requests to them.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

The Service is operated from the United States, and information is processed in the United States and in the regions used by our service providers. By using the Service you understand your information will be processed in these locations, which may have different data-protection laws than your jurisdiction.

We may update this Policy from time to time. Material changes will be communicated through the Service or by email, and the effective date above will be updated. Continued use after changes take effect constitutes acceptance of the revised Policy.

Privacy questions and requests: marketing@freedomcoastinnovations.com
Freedom Coast Innovations, LLC