Privacy Policy

Effective October 29, 2026

This policy explains what Talstor Technologies collects through TimeHub, why, and the choices you have. Short version: businesses use TimeHubto run their teams; we use the information only to provide and support the service, we don't sell it, and we don't use it for advertising.

Who is responsible

Your employer's workforce data. If your employer uses TimeHub, your employer decides what's collected about you and why. We process it on their behalf. Questions or requests about that data are best sent to your employer; we'll help them respond.
Account and billing data. For the people who sign up and manage accounts, and for visitors to our sign-up pages, Talstor Technologies is responsible.

What we collect

Account details: name, email address, password (stored only as a secure hash by our sign-in provider), business name, type and size.
Information your employer adds: name, contact details, job title, location, employee number, hire date, profile photo, pay rate (seen only by people who manage payroll), documents and certifications they upload.
Work records: schedules, availability, clock-in and clock-out times, breaks, timesheets, time-off requests and balances, tasks, messages and announcements.
Location at clock-in, only if your employer turns it on. Your device is asked for its location once when you tap Clock in. We keep only how far you were from the work location and whether that was within range, never your coordinates. It's off unless your employer switches it on.
Kiosk PINs: stored only as a one-way hash.
Payments: handled by Stripe. We never see or store full card numbers; we keep the plan, status and Stripe's customer reference.
Technical information: basic logs needed to run and secure the service (for example IP address, browser and error reports). Error reports are stored without email addresses, phone numbers or tokens and kept for 30 days.

We don't ask for Social Security numbers, bank details or government IDs. Please don't put them in notes, messages or uploaded documents unless you need to and your employer has a lawful reason.

How we use it

To provide TimeHub: schedules, time records, time off, payroll exports, notifications and the other features your business uses.
To keep it secure: sign-in, permissions, audit logs, fraud and abuse prevention.
To provide support when you ask, including Talstor staff entering a workspace only when its owner allows it, for a limited time, with every action logged.
To bill paid plans and send service messages (for example invitations, password resets and notifications you can turn off).
To understand and improve the service using totals (for example how many businesses use a feature), not to profile individuals.

Who we share it with

We share information only as needed to run TimeHub, with service providers bound to protect it:

Supabase (database, sign-in and file storage)
Hostinger (web hosting)
Stripe (payments)
Resend (sending email)
QuickBooks (Intuit) or Gusto, only if your business connects them; then the hours and employee details needed for payroll are sent to them

We may also disclose information if required by law, to protect people's safety, or as part of a merger or sale of our business (with this policy continuing to apply). We don't sell personal information or share it for cross-context advertising.

Cookies

We use only cookies needed for TimeHub to work: keeping you signed in, remembering which business and location you're viewing, your day or night setting, and a short-lived security cookie when connecting payroll services. No advertising or tracking cookies.

How long we keep it

While a business's account is active, we keep its data so it can use TimeHub. Time records are often needed for years for wage-and-hour law; your employer decides when to remove them.
Messages are deleted automatically after the period the business sets. Error reports are deleted after 30 days.
When a business closes its account and asks us to delete its data, we do so within 30 days, except records we must keep by law. Backups are overwritten on their normal cycle.

Security

Data is encrypted in transit. Access is limited by role and location, enforced in the database, and every business's data is kept separate. Connection tokens for payroll services are encrypted. No system is perfectly secure; if a breach affects your information, we'll notify you and the business as the law requires.

Your choices and rights

You can view and update much of your profile in TimeHub, and choose which notifications you get by email.
Depending on where you live (for example California), you may have the right to know, access, correct or delete your personal information, and not to be treated differently for using these rights. For workforce data, send requests to your employer; for account data, contact us.
We'll verify requests before acting on them and respond within the time the law allows.

Children

TimeHub isn't for children. Account holders must be 18 or older. Employers who employ minors are responsible for the data they add about them.

Changes

If we change this policy in a significant way, we'll tell account owners before the change takes effect and update the date above.

Contact

Talstor Technologies. Privacy questions or requests: legal@talstor.com. See also our Terms of Service.