Privacy Policy

This policy explains what information Detail Binder LLC ("Detail Binder," "we," "us") collects through the Detail Binder Lite service and the detailbinder.com website, and how we handle it.

The short version: we collect what a time clock needs to work, we use it only to run the Service, we do not sell it or use it for advertising, and your shop's data belongs to your shop.

1. Two roles, two kinds of data

Shop account data. When a shop owner or admin creates and manages an account, we collect that information for ourselves as the service provider: name, email, shop name and details, plan and billing status, and communications with us.

Employee data, processed for your shop. Employees use the Service because their employer (the shop) directs them to. The shop decides what employee information goes in and who can see it; we process it on the shop's behalf to provide the Service. Employees who have questions about this data, or want it corrected or deleted, should start with their employer; we support shops in fulfilling those requests.

2. What we collect

Information you or your shop provide: names and preferred names; email addresses (not required for kiosk-only employees); PINs, stored as salted hashes, never in plain text; job, department, and role assignments; shop settings (lunch, breaks, overtime, holidays, pay periods); profile photos, if the shop enables them.

Generated by using the Service: clock punches and timestamps, timesheets and the calculations derived from them, payroll export files, and device/technical basics needed to operate and secure the Service (IP address, browser type, session tokens, error logs).

Payment information: processed by Stripe. Card numbers go directly to Stripe; we never store them. We keep the billing records Stripe returns to us (plan, status, invoice history, card brand and last four digits), and we store the billing event notifications Stripe sends us so that a payment is never processed twice. Stripe acts as our payment processor and handles card data under its own privacy policy.

Before an account exists: when someone begins a signup we store the email address they entered and a hashed verification token, until the signup is completed or the request expires. When a shop invites an employee we store that person's name and email address and a hashed invitation token for up to one week, whether or not the invitation is ever accepted; the shop can revoke it at any time. Sign-in and invitation links themselves are stored only as one-way hashes, expire on their own, and can be used once.

From sign-in providers: if you sign in with Google or Microsoft, we receive your name and email from that provider. We do not receive your password, contacts, or files, and we store a durable identifier for your account at that provider so we can recognize you on your next sign-in. Magic-link sign-in uses only your email address.

Email delivery results: when a message we send bounces, fails, or is reported as spam, our email provider notifies us and we record that outcome against the address, so the shop can see that an invitation did not arrive. We record the delivery result, not the contents of the message.

Website: the marketing site uses Vercel Web Analytics, a cookieless analytics tool that collects aggregate page statistics and cannot identify individual visitors. We do not use advertising trackers or cross-site cookies. If you join the waitlist, we collect the email you submit, and use it only to send the updates you asked for.

What we do not collect: we do not use GPS or background location tracking, and we do not collect biometric data. Kiosk clock-ins use a PIN, not a fingerprint or face scan.

3. How we use information

To provide and secure the Service (authentication, clock and timesheet functionality, payroll exports); to send transactional email (magic links, invitations, billing and account notices); to provide support; to bill shops; to monitor errors and performance; and to improve the Service using aggregated or de-identified data that does not identify any person or shop. We do not sell personal information, and we do not use it for third-party advertising. We do not send marketing email to employees.

4. Who we share it with

Only service providers that help us run the Service, under agreements limiting their use of the data to providing services to us:

Beyond that, we disclose information only: within your own shop, according to the roles your shop assigns; if required by law or valid legal process (we will notify the shop unless legally barred); to protect the rights, safety, or security of users or the Service; or as part of a merger or sale of the business, in which case this policy continues to apply to data collected under it.

5. Retention

While a shop's subscription is active, we retain its data so the shop has its time and payroll history. After cancellation there is a 30-day retention window for reactivation or export; after it, we delete the shop's data from production systems, with backups aging out on a fixed schedule. We retain limited records we are legally required to keep, such as billing and tax records. Individual employee records are corrected or deleted at the shop's direction while the account is active.

Records created before an account exists age out on their own: a signup verification link expires in fifteen minutes, an unaccepted invitation expires after one week, and both are deleted with the request they belong to. Backups age out on a fixed schedule.

6. Security

Data is encrypted in transit (TLS) and at rest. PINs are stored as salted hashes. Sign-in is passwordless (magic links and OAuth), which means there are no service passwords to steal or reuse. Access to production data is restricted to personnel who need it to operate the Service. No system is perfectly secure; if a breach affects your data, we will notify affected shops without undue delay and consistent with applicable law.

7. Your choices and rights

Shop owners and admins can access, correct, export, and delete shop and employee data directly in the Service, and can contact us for help at hello@detailbinder.com.

Depending on where you live, you may have legal rights to access, correct, delete, or receive a copy of your personal information, and to non-discrimination for exercising them. For employee data, we will refer requests to the relevant shop and support the shop's response, as most privacy laws contemplate for processor relationships. We honor applicable rights regardless of state.

8. Children

The Service is for businesses and their workforce. It is not directed to children, and we do not knowingly collect information from anyone under 16 except as an employee record entered by an employer for a legally employed minor.

9. Where data lives

We are a US company and process data in the United States. If you access the Service from outside the US, you understand your information is processed in the US. The Service is currently offered to US businesses.

10. Changes and contact

If we make material changes to this policy, we will notify shops by email or in the app before the changes take effect. Questions or requests: hello@detailbinder.com.

Last updated: October 22, 2026.