Privacy Policy

Data we collect

• Account profile data, organization details, and workspace configuration.
• Operational product data such as bookings, schedules, and service activity.
• Billing and payment metadata from payment providers (for example Stripe IDs, invoice state, and card attributes).
• Security and anti-fraud signals such as IP address, request timestamps, user agent, and risk events.
• Punch-location evidence, if enabled by a company, such as employee/device location captured when an employee taps Clock In or Clock Out.
• Trip-tracking data, if enabled by a company, such as employee/device location captured when an employee taps On my way or Arrived for an assigned job.

How we use data

• Provide and secure Schedulaa services.
• Process subscriptions, invoices, and payments.
• Detect abuse, prevent fraud, and investigate suspicious billing behavior.
• Support attendance verification, manager review, operational security, and timekeeping review.
• Support active-trip dispatch visibility, client visit coordination, and temporary client tracking links when a company enables trip tracking.
• Respond to payment disputes and legal/regulatory requests.

Punch location evidence

If a company enables punch-location evidence, Schedulaa may collect employee/device location only when an employee taps Clock In or Clock Out. This evidence is used for attendance verification, manager review, operational security, and timekeeping review. Location data is collected only when the employee initiates a clock-in or clock-out action.

Schedulaa does not use this feature for background location tracking or continuous location monitoring. If location is unavailable, denied, unsupported, or times out, employees may still be able to clock in or out depending on the product flow. Punch-location evidence is advisory for manager review and is not continuous surveillance.

On my way trip tracking

If a company enables dispatch trip tracking, Schedulaa may collect employee/device location when an employee taps On my way for an assigned job and again when the employee taps Arrived. This data is used for manager dispatch visibility, job coordination, operational review, and temporary client-facing tracking links when the company enables client sharing for that trip.

Schedulaa does not use this feature for all-day surveillance, background location collection outside an active trip, or continuous off-duty monitoring. Trip tracking is intended for active job travel only and may stop automatically when the employee marks the trip as arrived, depending on the company's settings.

Client tracking links are temporary and company-controlled. A company may create, send, revoke, or automatically expire these links based on its dispatch settings.

Fraud prevention controls

To reduce card abuse and account takeover risk, Schedulaa may apply risk-based controls including attempt limits, 3D Secure challenges, prepaid-card restrictions for subscriptions, and temporary billing review holds.

We may retain fraud-attempt and fraud-event records for limited periods to support operational security, dispute response, and compliance.

Data sharing

We share data with trusted subprocessors only as needed to operate the platform (for example payments, infrastructure, email delivery, and security tooling). Payment data is handled by PCI-compliant payment providers.

If a company enables trip-tracking links for a client visit, Schedulaa may share limited dispatch-trip data with the intended client through a temporary secure link for that active visit.

Retention and controls

Companies may configure certain dispatch retention and link-expiry settings in the product. Schedulaa applies access controls, audit records, and revocation controls to support limited operational use of punch and trip-location data.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict certain personal data. To submit a request, contact us through support.