Privacy Policy

We collect several different types of information for various purposes to provide and improve our Service to you.

A. Personal Data Provided by You

• Account Information: When you register for an account (Business Owner, Employee, or Customer), we collect your name, email address, phone number, and password.
• Project and Estimate Details: When customers request a home estimate, we collect project descriptions, physical addresses where services are requested, and any uploaded project details or images.
• Financial and Billing Information: For billing and payouts, we collect transaction-related data. Payment processing is securely handled by our third-party processor, Stripe. We do not store full credit card numbers or bank credentials on our servers.
• Employment and Payroll Data: For businesses utilizing our Employee Portal, we collect payroll configurations, accrued vacation preferences, and timesheet information.

B. Device and Location Data (Mobile App & Employee Portal)

• Geofenced Timekeeping Verification Results: If an employee uses our geofenced timekeeping feature, the app compares the device's approximate location against the assigned work site at clock-in and at hourly intervals during an active shift. We store only the timestamp and the verification outcome for each check (on site, off site, or unverified). We do not store device GPS coordinates, and we do not track an employee's movement between checks. If the employee declines location permission or is offline, the check is simply recorded as unverified and time keeps tracking.
• Usage & Log Data: We collect information that your browser or mobile device sends whenever you visit our Service, including your device's IP address, browser type, device identifiers, and operating system.

We use the collected data for various purposes, including to:

• Provide, maintain, and improve our Service.
• Facilitate home estimates, document previews, invoicing, and service tracking.
• Process payroll, calculate overtime parameters, and distribute paystubs securely.
• Verify on-site attendance for field employees using the geofenced timekeeping results described in Section 1.B.
• Authenticate user access and enforce account safeguards (e.g., handling failed account transactions).
• Communicate with you regarding customer support, legal terms, and administrative notifications.

We do not sell your personal data. We disclose your information only under the following circumstances:

• To Business Owners / Employer Accounts: If you are an employee, your timekeeping, clock verification results (never device coordinates), and profile details are accessible to your employer's Admin or Owner Dashboard.
• To Service Providers: We share data with trusted third-party vendors who perform services on our behalf, such as Stripe for secure payment processing and infrastructure hosting.
• For Legal Compliance: We may disclose your information where required by law, subpoena, or government regulation, or to protect the safety, rights, and security of Zipkey, our users, or the public.

The security of your data is important to us. We implement industry-standard administrative, technical, and physical security measures to protect against unauthorized access or alteration.

• Retention: We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy, comply with labor laws (for payroll records), and resolve disputes.
• Safety Thresholds: To prevent fraud and abuse, we employ automatic protection safeguards, including a 72-hour grace period following failed account payments before restricting account access.

Depending on your jurisdiction (such as GDPR or CCPA), you may have the following rights regarding your personal data:

• The right to access, update, or delete the personal information we hold about you.
• The right to restrict or object to the processing of your data.
• The right to withdraw consent for location checks at any time via your mobile device settings (though this may prevent verified clock-ins — clocked time is still recorded, but each check is marked unverified for your employer's review).

To exercise any of these rights, please contact us through our designated portals.

Our Service is not directed to anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under 18. If we become aware that a child has provided us with Personal Data, we take immediate steps to remove that information from our servers.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. You are advised to review this Privacy Policy periodically for any changes.

If you have any questions about this Privacy Policy, please contact us:

• Via our website: https://zipkey.app/contact
• Via our dashboard support portal.