Privacy & Security

PrivacyPolicy

Last updated: October 17, 2025

Your privacy is important to us. This policy explains how ZamanSync collects, uses, and protects your personal information.

Data Encryption

All data encrypted at rest and in transit using industry-standard protocols

Transparency

Clear disclosure of what data we collect and how it's used

Your Rights

Full control over your data with export and deletion options

1. Information We Collect

Account Information

  • Name, email address, and password (encrypted)
  • Organization name and details
  • Phone number (optional)
  • Profile photo (optional)

Time Tracking Data

  • Clock-in and clock-out timestamps
  • GPS location data (when enabled)
  • Device information and IP addresses
  • Selfie photos (if required by employer)
  • Notes and comments on timesheet entries

Usage Information

  • Log data (access times, pages viewed, errors)
  • Browser type and version
  • Cookies and similar tracking technologies
  • Feature usage analytics

2. How We Use Your Information

We use the collected information for the following purposes:

  • Service Delivery: To provide time tracking and attendance management features
  • Authentication: To verify your identity and maintain account security
  • Communication: To send service updates, notifications, and support messages
  • Analytics: To improve our service and user experience
  • Compliance: To comply with legal obligations and prevent fraud
  • Billing: To process payments and manage subscriptions

3. Data Sharing and Disclosure

We do not sell your personal information. We may share data in these limited circumstances:

  • With Your Employer: Your employer (organization owner/admin) can access your time tracking data
  • Service Providers: Third-party services that help us operate (hosting, analytics, payment processing)
  • Legal Requirements: When required by law, court order, or government request
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Your Consent: When you explicitly authorize us to share your information

4. Data Security

We implement industry-standard security measures to protect your data:

  • End-to-end encryption for data transmission (TLS/SSL)
  • Encrypted storage of sensitive data at rest
  • Regular security audits and vulnerability assessments
  • Multi-factor authentication (MFA) for admin accounts
  • Access controls and role-based permissions
  • Regular backups and disaster recovery procedures
  • Employee training on data protection

5. Your Rights and Choices

You have the following rights regarding your personal data:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and data
  • Export: Download your data in portable formats (CSV, JSON)
  • Opt-out: Unsubscribe from marketing communications
  • Restrict Processing: Limit how we use your data
  • Object: Object to certain processing activities

To exercise your rights, please contact us at privacy@zamansync.com

6. Data Retention

We retain your data for as long as necessary to provide our services:

  • Active Accounts: Data retained while your account is active
  • Deleted Accounts: Data deleted within 30 days of account closure
  • Legal Requirements: Some data retained longer for compliance (e.g., payroll records: 7 years)
  • Backup Systems: Data in backups purged within 90 days

7. Cookies and Tracking

We use cookies and similar technologies for:

  • Essential Cookies: Required for authentication and security
  • Analytics Cookies: Help us understand how you use our service
  • Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling essential cookies may limit functionality.

8. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure adequate safeguards are in place through standard contractual clauses approved by regulatory authorities.

9. Children's Privacy

ZamanSync is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or in-app notification. Continued use of ZamanSync after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

Email: privacy@zamansync.com

Website: zamansync.com/contact

Address: ZamanSync, Inc., [Your Address]

ZamanSync is committed to compliance with:

GDPR Compliant
CCPA Compliant
SOC 2 Ready
ISO 27001

Questions about our privacy practices?

Our team is here to help you understand how we protect your data.