Privacy Policy

Effective July 30, 2026. This policy describes how NuvoWork ("NuvoWork", "we", "us") handles information in the NuvoWork time tracking and payroll-readiness application at nuvowork.app. It is written to match how the product actually works today.

1. Two kinds of users, two different roles

NuvoWork is business software sold to employers. When a company signs up, that company (the "Employer") decides what data goes into NuvoWork about its workers and how that data is used. For that workforce data, the Employer is the controller and NuvoWork acts as a service provider / processor operating on the Employer's instructions.

For our own account, billing, and support records, NuvoWork is the controller. Employees who have questions about how their employer uses time or location data should contact their employer; we cannot change an employer's internal policies.

2. What we collect and why

Account and identity data

• Email address, display name, password (stored only as a one-way hash by our authentication provider), sign-in timestamps, and the company you belong to. Used to authenticate you and scope your access to your company.
• Role (employee, company admin, platform admin) and account status (active/archived). Used to enforce permissions.
• Invitation records: invited email address, display name, invite token, expiration, and who sent it. Used to onboard team members. Invite links expire and are single-use.

Company data

• Company name, description, optional logo image, time zone, week start, overtime threshold, work categories, PTO categories, and feature settings.
• Subscription data: plan, trial dates, subscription status, and Stripe customer/subscription identifiers. Card numbers are never sent to or stored by NuvoWork; payment details are handled by Stripe.

Time and work data

• Clock-in and clock-out times, break periods, work category selections, whether an entry was created by the employee or entered manually by an admin, and manual-entry reasons.
• Time correction requests (proposed times, reason, reviewer, decision) and adjustment records showing prior and new values.
• Schedules, schedule overrides, calendar events and completion notes, company messages and replies, alerts, and PTO balances and adjustments.
• Hourly rate, when an Employer enters one. Used only to estimate labor cost and produce payroll-ready figures. Visible to company admins, not to other employees.

Location data (only if the Employer turns it on)

GPS is off by default. An Employer may enable one of two modes:

• Clock events only — a single location reading at clock-in and at clock-out.
• Full shift — clock event readings plus periodic readings (approximately every five minutes) while a shift is open.

GPS is never used for off-duty tracking. In both modes, capture happens only while you are clocked in and only while the app is open in the foreground. NuvoWork does not run background location tracking, does not collect location when you are off the clock, does not collect location after you clock out, and does not collect location on days you do not work. There is no continuous tracking, no geofence monitoring outside a shift, and no location history built from your personal time. Capture also requires (a) the Employer's setting to be on, (b) your in-app consent, and (c) your device's operating system permission. You can revoke either at any time; revoking OS permission stops collection entirely. Each reading stores latitude, longitude, accuracy, timestamp, and a best-effort street-level address label. If your Employer turns GPS verification on or off, or changes the mode, NuvoWork automatically sends every employee at that company an in-app notice describing the change.

To turn coordinates into a readable address, coordinates for clock-in and clock-out readings are sent to the OpenStreetMap Nominatim geocoding service. Only the coordinates are sent — no name, email, or company identifier.

Support, feedback, and diagnostics

• Feedback and support tickets: your message, category, email, and — because your browser reports it — browser, operating system, and device type, plus any screenshot you choose to attach.
• Push notification subscriptions: the browser-issued push endpoint, encryption keys, and user agent, stored only if you opt in to notifications.
• Email delivery logs: recipient address, template, delivery status, and error messages, kept to troubleshoot undelivered mail and honor unsubscribes.
• Audit logs of administrative actions (invitations, role changes, hour adjustments, settings changes, archiving, exports), including actor email, timestamp, and user agent.

What we do not collect

• No Social Security numbers, bank accounts, tax identifiers, or payment card numbers.
• No third-party advertising, analytics, or cross-site tracking cookies. We do not use Google Analytics or similar tools. The only browser storage we use is what is required to keep you signed in and to remember your location preference.
• No keystroke logging, screen recording, screenshot capture, microphone, camera, or device-activity monitoring.

3. Payroll: exports, not payroll processing

NuvoWork does not process payroll, calculate taxes, or move money. It produces payroll-ready data: an admin can generate a CSV of hours, overtime, and optional cost figures formatted for providers such as QuickBooks, Gusto, ADP, or Paychex. Export files are generated in your browser and saved or shared by you. NuvoWork records a summary of each export (period, counts, totals, who exported it) for audit purposes, and does not transmit your data to any payroll provider.

4. Who can see what

• Employees see their own time entries, breaks, corrections, PTO balances, their own location history, and company-wide shared content (messages, calendar, categories).
• Company admins see all data for their own company: employee profiles, time entries, adjustments, hourly rates, location history, alerts, PTO, exports, and the company audit log. They cannot see any other company's data.
• Employees cannot see other employees' hourly rates, location history, or PTO balances.
• NuvoWork platform administrators — access is limited to authorized support and security personnel, and is used only for account administration, customer support, security investigations, and troubleshooting. It is never used to browse business data casually, and administrative actions are recorded in append-only audit logs.

Access rules are enforced in the database with row-level security policies, so they apply to direct or manipulated requests, not only to the user interface.

5. Where data is stored and how it is protected

NuvoWork runs on managed cloud infrastructure in the United States. Application data is stored in a managed PostgreSQL database with row-level security; uploaded logos are stored in a private storage bucket. Current protections:

• TLS encryption for all traffic between your device and NuvoWork.
• Encryption at rest as provided by our hosting and database provider.
• Passwords stored only as salted one-way hashes; new passwords are checked against known-breach lists.
• Company-scoped, role-based access enforced at the database layer.
• Append-only audit logs for administrative actions, including company settings changes recorded with the previous and new value; locked payroll periods block edits.
• Automated backups managed by our database provider.

We do not currently claim SOC 2, ISO 27001, HIPAA, or PCI certification, and we do not offer end-to-end encryption. No online service can guarantee absolute security.

6. Service providers (subprocessors)

We share data only with vendors that help us operate the service, under contract, and never for their own marketing:

• Lovable Cloud / Supabase — application hosting, database, authentication, and file storage.
• Resend — transactional email delivery (invitations, password resets, notifications).
• Stripe — subscription billing and payment processing. Stripe receives billing contact and payment details directly.
• OpenStreetMap Nominatim — reverse geocoding of clock-event coordinates into address labels.
• Browser push services (Apple, Google, Mozilla) — delivery of push notifications you opt into.

The full list, including the specific data shared with each provider and why it is needed, is published at nuvowork.app/subprocessors.

We may also disclose data when required by law, to enforce our Terms, or in connection with a merger or acquisition (with notice).

7. No selling, no advertising, no tracking

• We do not sell personal information and we do not share it for cross-context behavioral advertising, as those terms are used in the California Consumer Privacy Act and comparable state privacy laws.
• We do not run advertising. NuvoWork contains no ads, no ad networks, no ad pixels, and no data brokerage of any kind. Your company's data is never used to target you or anyone else.
• We do not use analytics or tracking cookies. There is no Google Analytics, no third-party behavioral analytics, and no cross-site tracking. The only browser storage we use is what is required to keep you signed in and to remember your location preference.
• We do not use your data to train third-party AI models.

Our revenue comes only from subscriptions paid by Employers — never from monetizing personal information.

8. Retention

• Time, location, calendar, PTO, and message records are retained for as long as the Employer's account is active, because employers generally must keep time records for multiple years under wage-and-hour law.
• On the Free plan, in-app visibility of history is limited to the last 30 days; older records still exist and become visible again on Pro.
• Archived employees keep their historical records (access is revoked, history is preserved) so the Employer's records stay complete and auditable.
• Audit logs and payroll run records are append-only and are not deleted while the account exists.
• Invitation tokens expire after 14 days. Email delivery logs and support tickets are kept while useful for troubleshooting and dispute resolution.
• When a company account is deleted, its records are deleted from the live database. Residual copies may persist in encrypted backups for a limited period before expiring.

9. Your choices and rights

• You can edit your display name and notification preferences in the app.
• You can grant or revoke location consent in the app, and revoke location permission in your device settings, at any time.
• You can unsubscribe from non-essential email; account and security email continues.
• Employees cannot delete their own time or location records, because those are their employer's business records. Requests to correct time records go through the in-app correction workflow, which preserves an audit trail.

Depending on where you live (for example California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other states with comprehensive privacy laws), you may have rights to access, correct, delete, or obtain a copy of your personal information, and to appeal a denial. Employees should direct these requests to their Employer, who controls the data; if you send a request to us about Employer-controlled data, we will forward it to the Employer or act on the Employer's instruction. Employers and NuvoWork account holders may send requests to us directly. We do not discriminate against anyone for exercising these rights.

To make a request, email support@nuvowork.app. We may need to verify your identity and your relationship to the account before acting.

10. Children

NuvoWork is workplace software and is not directed to children under 13. We do not knowingly collect information from children under 13. If an Employer uses NuvoWork for lawfully employed minors, the Employer is responsible for any required parental or guardian consent.

11. International users

NuvoWork is operated from and hosted in the United States and is intended for U.S.-based businesses. If you access it from elsewhere, you understand that your information will be processed in the United States.

12. Security incidents

If we become aware of a breach affecting your data, we will notify affected Employers without undue delay and as required by applicable law, and provide the facts we have. To report a suspected vulnerability or security issue, email support@nuvowork.app with details; please do not publicly disclose it before we can respond.

13. Changes to this policy

We may update this policy as the product changes. Material changes will be noted by updating the effective date above and, where appropriate, by notice in the app or by email. Continued use after an update means you accept the revised policy.

14. Contact

Privacy questions: support@nuvowork.app. General contact: hello@nuvowork.app.