Privacy Policy

1. Overview

KlockGrid is a time tracking application provided by Expedier. This policy explains what information the Service collects, why it is collected, and how it is handled. It applies to the KlockGrid web application and its supporting services.

2. Information we collect

• Account information. When you sign in with Google, we receive your name, email address, and profile identifier from your Google Workspace account. We do not receive or store your Google password.
• Time and project data. Hours logged, dates, descriptions, task and project assignments, department membership, and timesheet approval status.
• Calendar data. If you choose to import events from Google Calendar, we read the event details needed to create draft time entries. This is optional and only occurs when you initiate an import.
• Technical data. Standard server and security logs generated when you use the Service.

3. How we use it

Information is used solely to operate the Service, specifically to:

• Authenticate you and maintain your session.
• Record, display, and total the time you log.
• Route timesheets to the appropriate managers for review and approval.
• Produce utilization and project reports for your organization.
• Send service-related notifications, such as timesheet reminders.

We do not sell your information, and we do not use it for advertising.

4. Who can see your data

KlockGrid is an organizational tool. Your name, and the time records you submit, are visible to your managers, department leads, and organization administrators as required for approval and reporting. Access is enforced at the database level through row-level security policies, so users only see the records their role permits.

5. Service providers

We rely on a small number of providers to run the Service:

• Supabase— database, authentication, and hosting of application data.
• Vercel— application hosting and delivery.
• Google— sign-in, and calendar import where you enable it.

These providers process data on our behalf and are not permitted to use it for their own purposes.

6. Retention

Time records are retained for as long as your organization requires them for payroll, billing, and reporting purposes. Account records are retained while your access remains active. On request, and subject to your organization’s own obligations, we will remove personal information that is no longer needed.

7. Security

Data is transmitted over encrypted connections and stored with access restricted by role. Authentication is delegated to Google Workspace, so your organization’s existing account controls — including two-factor requirements — apply to KlockGrid.

8. Your choices

You may request access to, correction of, or deletion of your personal information by contacting us. Calendar import is optional and can be left unused. Some requests may be limited by your organization’s record-keeping obligations.

9. Contact

For privacy questions or requests, contact Expedier at info@expedier.co.