Privacy Policy
Last updated: November 3, 20261. Who we are
Hourvy is operated by Suswo. We built Hourvy to help small businesses track worker hours and manage payroll simply. You can reach us at team@hourvy.com.
Hourvy is not a payment processor for your business. We track hours and payment status only — no money for worker wages ever passes through Hourvy or Paddle. You pay your workers directly, however you already do (cash, transfer, or check), then mark it as paid in Hourvy.
2. What data we collect
We collect only what's needed to run the service:
- Business accounts — your name, email address, business name, logo (if you add one), timezone, and currency settings. If you sign in with Google or Facebook, we receive your name, email address and account ID from them.
- Where you signed up from — the IP address you signed up from and the approximate location we look up from it (country, region and city), and how you found us (the site that linked to us, campaign tags in the link, and the first page you visited).
- Worker profiles — name, email (optional), phone (optional), and hourly rate. The business owner creates the initial profile; workers can then set their own password via their invite link and update their own name and phone number after logging in. If the business uses a kiosk, each worker's kiosk PIN is stored in scrambled (hashed) form.
- Work records — shifts, breaks, hours, schedules, roles and jobs, time off and other worker requests, pay periods, tips and adjustments, and payment status records (we record that a payment was made, not the transfer of money itself).
- Location at clock-in — only if the business turns on Location check: the device's location (latitude, longitude and accuracy) when a worker clocks in or out.
- Kiosk photos — only if the business turns on Photos at clock-in for its kiosk: a photo of the worker at each kiosk clock-in and clock-out. We don't use facial recognition or any biometric analysis on these photos.
- Messages — what you send the Hourvy team through Messages and Feedback.
- Technical data — for signed-in sessions, the IP address and browser type, when you last used Hourvy, and when you last opened it as the app on your home screen. We use this to keep accounts secure and to understand how Hourvy is used.
- Your Hourvy subscription payment method — handled entirely by Paddle, our payment processor and merchant of record for your subscription fee to us. We never store card numbers or payment details on our servers.
3. How we use your data
We use your data to run Hourvy for you:
- To provide and operate the Hourvy service.
- To send you transactional emails (account creation, invites, reminders, billing receipts, password resets) and replies to your messages.
- To process your Hourvy subscription billing through Paddle — this does not include processing any payments to your workers.
- To help you when you contact us, and to fix problems with your account.
- Authorized Hourvy staff can view limited account information, such as business details and workers' names and contact details, to provide support and fix problems. We don't look at hours, pay, location or photos unless you ask us to.
- To keep the service secure and prevent abuse.
- To improve Hourvy, using totals across all businesses (for example, how many businesses use a feature), never one business's workers or pay.
- To measure how well our own website and ads work (see "Cookies" below).
4. Who we share it with
We share data with a small number of service providers, only as needed for them to do their job for us:
- Paddle — for processing your Hourvy subscription payment (not your worker payments). Paddle acts as merchant of record for your subscription, so Paddle's privacy policy applies to that payment data.
- Cloudflare — for infrastructure, DNS, DDoS and bot protection on sign-in, and storage of business logos and kiosk photos.
- Resend — for sending our emails.
- DigitalOcean — our hosting provider. Our servers and database are located in New York, United States.
- Cloudflare R2 — encrypted storage for our database backups.
- Google and Facebook — only if you choose to sign in with them.
- Google Analytics and Meta — for measuring website and app usage and our ads. See "Cookies" below.
Some service providers may process data in other countries.
We look up approximate location from an IP address using a database stored on our own servers, so your IP address isn't sent anywhere for this.
We never sell your data. Your business's records — workers, hours, pay, location and photos — are never shared with advertisers.
5. Data retention
We keep your data for as long as your account is active. Kiosk photos are deleted automatically after 90 days.
You can delete your account yourself in Settings → Your account, which permanently deletes your business, workers, time records, payroll history and kiosk photos straight away. You can also ask us to delete it by emailing team@hourvy.com; we do this within 30 days. Some data may be retained for a limited additional period to comply with legal obligations such as tax records.
Database backups are kept for 14 days, after which deleted data is removed from backups too.
6. Worker data & deletion
Your employer controls your data in Hourvy and decides which features (such as location check or kiosk photos) are used. For access, correction or deletion, please contact your employer first; we'll help them handle your request.
When a business removes a worker from their account:
- The worker's personal information (name, email) is permanently deleted and cannot be recovered.
- Time and payment records are retained for the business's financial records but are anonymized — not linked to any identifiable person.
- If a worker is associated with multiple businesses, only the employment link for that business is removed. Personal data is retained until all business links are removed.
7. Your rights
You can request to access, correct, or delete your data at any time by emailing team@hourvy.com.
EU users have additional rights under the General Data Protection Regulation (GDPR), including data portability and the right to object to processing.
California users have additional rights under the California Consumer Privacy Act (CCPA), including the right to opt out of the sharing of personal information for advertising. Email us to use it.
8. Cookies
We use cookies that are necessary to run Hourvy: session cookies that keep you logged in and your session secure, a "remember me" cookie if you choose it, and a cookie that lets a shared kiosk device stay connected to its business. We also set our own cookie for up to 90 days that remembers how you first found us (the linking site and campaign tags), so we know which of our marketing works.
On our website and in the app, we use Google Analytics to understand how people use Hourvy. We use the Meta Pixel only on our public website, sign-up pages, and the confirmation right after you sign up, to measure our ads on Facebook and Instagram, for example whether someone who saw an ad signed up. These set their own cookies and send usage data to Google and Meta. You can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on, and control Meta's ad tracking in your Facebook ad preferences or by blocking third-party cookies in your browser.
9. Security
Your data is encrypted in transit (HTTPS), and our database backups are encrypted. Payment data is handled entirely by Paddle and never touches our servers.
10. Children
Hourvy isn't intended for children under 13. Businesses are responsible for the data of the workers they add, including any workers under 18.
11. Changes to this policy
If we make material changes to this policy, we'll notify you by email at the address on your account before the changes take effect.
12. Contact
Questions? Email us at team@hourvy.com.