Privacy Policy

We collect:

• Account data — your email address and authentication details, used to sign you in and identify your workspace.
• Financial & document data — the bills, receipts, invoices, transactions, drawings, and accounting records you upload or enter, used to capture, categorize, track, and report on your business.
• Employee & time-tracking data — if your workspace uses the employee time-tracking app: worker names, crew assignments, clock-in and clock-out times, and the approximate location of the device at the moment of clocking (used only to check the clock happened at the job site — we do not track location continuously). Workers who clock in are identified by name and do not need an account.
• Messages & calls — the content of chat messages and files you exchange with us through the portal. Calls are connected peer-to-peer where possible; we process the signalling needed to set them up and do not record them.
• Billing data — subscription status and payment records. Card details are handled by our payment provider; we do not store full card numbers.
• Usage & device data — basic technical logs needed to operate and secure the service, and a device identifier cookie on phones used for QR clock-in, which binds that phone to one worker per workspace to prevent buddy-punching.

We use your data to provide and improve the service — including AI-assisted reading and categorization of documents you upload — process payments, communicate with you about your account, and meet legal obligations. Location captured at clock-in is used only to verify the clock event against the job site's geofence and is stored with the timesheet entry. We do not sell your personal information, and we do not use your financial, document, employee, or message data for advertising or to train third-party AI models.

We rely on a small set of trusted providers who process data on our behalf under their own security and privacy commitments:

• Clerk — authentication and account management.
• AlturaTech infrastructure — database and secure storage for your documents and accounting records.
• AI processing provider — reads and categorizes the bills, receipts, and invoices you upload.
• Payment provider — subscription billing and invoicing.
• Azure cloud hosting — application hosting, database, secure storage, and delivery.

We keep your account, documents, and financial records for as long as your account is active, and for a reasonable period afterwards to comply with legal, accounting, tax, and dispute-resolution requirements. You can ask us to delete your data (see below); some records may be retained where the law requires it.

Access to the service requires authentication, data is transmitted over encrypted connections, and access controls restrict who can see your content. No system is perfectly secure, but we take reasonable measures to protect your information.

You can request access to, correction of, or deletion of your personal data, and you can object to or restrict certain processing. Workers whose details were entered by an employer using the time-tracking app can make the same requests, and we may coordinate with that employer to fulfil them. To exercise any of these, email admin@altura.ovh and we'll respond within a reasonable time.

We may update this policy as the service evolves. Material changes will be communicated in the app or by email, and the date above will be revised.