Privacy Policy

Sheet This ("we," "us," or "our") provides a workforce management and time tracking platform designed to help businesses manage employee time, attendance, and productivity. This Privacy Policy applies to all users of our Service, including administrators, employers, and employees.

By using our Service, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with our practices, please do not use the Service.

We collect various types of information to provide and improve our Service. The information we collect includes:

Personal Information

Information that identifies you as an individual:

• Name and contact information (email address, phone number)
• Company or organization name
• Account credentials (username, encrypted password)
• Job title and department
• Profile information and preferences
• Billing and payment information (processed by third-party payment processors)

Location Data

Usage Data

Information about how you use the Service:

• Clock-in and clock-out times
• Hours worked and overtime calculations
• Device information (device type, operating system, browser type)
• IP address and general location (city/region level)
• Pages viewed and features accessed
• Session duration and interaction patterns
• Error logs and diagnostic information

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for authentication and basic functionality
• Analytics Cookies: Help us understand how users interact with the Service (via Vercel Analytics)
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings, but disabling essential cookies may affect functionality.

We use the information we collect for the following purposes:

Service Provision

• Provide, operate, and maintain the time tracking and workforce management Service
• Verify employee work locations using GPS data
• Calculate hours worked, overtime, and labor costs
• Generate reports and analytics for employers
• Process payments and manage subscriptions

Account Management

• Create and manage your account
• Authenticate users and prevent unauthorized access
• Provide customer support and respond to inquiries
• Send important notices about your account or the Service

Communication

• Send service-related notifications and updates
• Respond to your questions and support requests
• Send marketing communications (with your consent, which you may withdraw)
• Notify you of changes to our Terms or Privacy Policy

Service Improvement

• Analyze usage patterns to improve features and user experience
• Develop new features and functionality
• Conduct research and analytics
• Monitor and improve system performance and reliability

Legal and Security

• Comply with legal obligations and regulatory requirements
• Detect, prevent, and address fraud, security issues, and technical problems
• Enforce our Terms and Conditions
• Protect the rights, property, and safety of Sheet This, our users, and the public

If you are located in the European Economic Area (EEA), UK, or Switzerland, we process your personal data based on the following legal grounds:

You have the right to withdraw your consent at any time where we rely on consent as the legal basis for processing. However, this will not affect the lawfulness of processing before withdrawal.

We do not sell your personal information. We share your information only in the following circumstances:

With Your Employer/Organization

If you are an employee using Sheet This, your time tracking data, location data, and work-related information are shared with your employer or organization administrators who have invited you to use the Service. This includes:

• Clock-in/clock-out times and locations
• Hours worked and overtime
• Time tracking reports and analytics
• Profile and contact information

Service Providers

We share information with third-party service providers who perform services on our behalf:

• Cloud hosting providers (e.g., Vercel, AWS)
• Analytics services (e.g., Vercel Analytics)
• Payment processors (credit card information is handled directly by payment processors)
• Email service providers
• Customer support tools

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders, warrants)
• Government or regulatory requests
• Legal claims or disputes
• Emergencies involving danger of death or serious physical injury

Business Transfers

If Sheet This is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred to the new entity. We will notify you of any such change and provide you with choices regarding your data.

With Your Consent

We may share your information for other purposes with your explicit consent.

We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction.

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to protect your information.

If you believe your account has been compromised, please contact us immediately at security@sheetthis.com.

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy.

Retention Periods:

• Active Accounts: Data is retained while your account is active and for a reasonable period afterward to allow reactivation
• Deleted Accounts: After account deletion, personal data is deleted or anonymized within 90 days, except where retention is required by law
• Legal Requirements: Some data may be retained longer to comply with legal, accounting, or regulatory obligations (e.g., tax records for 7 years)
• Backup Systems: Data may persist in backup systems for up to 90 days after deletion from active systems

Data Deletion Requests

You may request deletion of your personal data at any time by contacting us. We will respond to deletion requests within 30 days and delete data within 90 days, subject to legal retention requirements.

Before account deletion, you can export your data. Please request data export before account closure as we cannot retrieve data after it has been deleted.

Depending on your location, you have various rights regarding your personal data. We respect these rights and provide mechanisms to exercise them.

How to Exercise Your Rights:

To exercise any of these rights, please contact us at:

• Email: privacy@sheetthis.com
• Use the privacy settings in your account dashboard
• Submit a request through our support portal

We will respond to requests within 30 days and may require identity verification to protect your privacy. We do not charge fees for exercising your rights unless requests are manifestly unfounded or excessive.

Given the nature of our Service, location data is a critical component. We are committed to transparent and responsible handling of GPS location information.

Employer Responsibilities:

Employers using Sheet This must:

• Provide clear notice to employees about location tracking practices
• Obtain necessary consent as required by local employment and privacy laws
• Use location data only for legitimate business purposes (e.g., verifying work location)
• Comply with all applicable labor and privacy regulations
• Respect employee privacy and not misuse location data

How to Control Location Tracking:

• Revoke location permissions in your device settings (this may limit Service functionality)
• Disable GPS features if your employer allows alternative clock-in methods
• Contact your employer or administrator with concerns about location tracking
• Exercise your privacy rights to access or delete location data

We store location data securely and share it only with your employer/organization administrators. Location data is subject to the same retention and deletion policies as other personal data.

Our Service may integrate with or contain links to third-party services, websites, or applications. We are not responsible for the privacy practices of these third parties.

Third-Party Services We Use:

• Vercel Analytics: Website analytics and performance monitoring - Privacy Policy
• Payment Processors: Secure payment processing for subscriptions
• Cloud Hosting: Infrastructure and data storage services
• Email Services: Transactional and marketing email delivery

These third-party services may collect information as described in their own privacy policies. We encourage you to review their privacy practices.

When you click on third-party links or use third-party integrations, you leave our Service and are subject to the privacy policies of those third parties. We do not control and are not responsible for their data practices.

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18.

If you are under 18, you may not use the Service or provide any personal information to us. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@sheetthis.com.

If we learn that we have collected personal information from a child under 18, we will delete that information promptly.

Sheet This is based in the United States. Your personal information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

Data Protection for International Users:

If you are located outside the United States, please be aware that:

• Data protection laws in the United States may differ from those in your country
• Your data may be subject to U.S. government access requests under applicable laws
• We implement appropriate safeguards to protect your data during international transfers

Transfer Mechanisms:

For transfers from the EEA, UK, or Switzerland, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Your explicit consent for certain transfers

By using our Service, you consent to the transfer of your information to the United States and other countries as necessary to provide the Service.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

How We Notify You of Changes:

• Posting the updated Privacy Policy on our website with a new "Last Updated" date
• Sending an email notification to your registered email address for material changes
• Displaying a prominent notice within the Service

Material changes will take effect 30 days after notification. Your continued use of the Service after the effective date constitutes acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For questions about our Terms and Conditions, please see our Terms and Conditions page.