Privacy policy

Last updated 8 October 2026

Clockade is made by Innovation With Pixels, a software company in Pakistan ("we", "us"). This policy explains what we collect when a company uses Clockade, why, who can see it and how long we keep it.

Two roles

For the data a company puts into Clockade about its own staff, the company decides what is collected and we process it on its behalf. For the details of the people who sign up and manage the account (name, email, billing), we are responsible.

What is collected

• Account: names, work emails, roles, password hashes (never the password itself), two-step sign-in secrets (encrypted).
• Work records: time sessions, breaks, attendance, leave, missing-time requests, payroll figures, expenses, clients and invoices that the company enters.
• From the desktop apps, only while the timer runs: start and stop times, idle time, screenshots at the interval the company sets, and the names of apps and websites in use.
• Vault: logins the company shares, with passwords encrypted on our server.
• Billing: plan, number of people and payment status. Card details are held by Stripe, not by us.
• Technical: IP addresses and browser details for sign-in security and abuse limits.

Why

To run Clockade for the company, keep accounts secure, take payment, send the emails the service needs (codes, invites, billing) and, unless you unsubscribe, a short series of tips. We don't sell data and don't use it for advertising.

Who can see it

Inside a company: admins see the company's records; staff see their own. Companies can never see each other's data. Our team looks at a company's data only to give support the admin asked for, and each such sign-in is written to the company's audit log.

Service providers

• Hetzner (Germany): the servers and backups.
• Stripe: card payments.
• Resend: sending email.
• Cloudflare: domain and network protection.
• Anthropic: only if the company connects Claude, or uses the in-app help assistant.

How long

• Screenshots: 30 days on Team, 90 days on Business, or less if the company chooses.
• Other records: while the company is a customer. After cancelling, 90 days, then deleted.
• Backups: 30 days.

Your rights

Staff should ask their employer first, since the employer controls their records. Anyone can ask us for a copy of their data, a correction or deletion at the address below.

Security

Everything travels over HTTPS. Passwords are hashed, vault entries and two-step secrets encrypted, every company's records are separated, and sign-ins and sensitive actions are logged.

Questions: support@clockade.com.