Privacy Policy

Last updated: June 10, 2026

JobPunch is a workforce time-tracking service operated by South Bend IT Solutions LLC (d/b/a South Bend IT Services) ("we", "us", "JobPunch"). This page explains what we collect, why, and what choices you have.

1. Information we collect

From the business owner (admin):

• Account info: email, password (stored hashed), business name, time zone, language
• Billing info: payment method (handled by Stripe — we never see card numbers)
• Owner phone number (optional, for SMS alerts)

From employees added to the system:

• Name, 4-digit PIN (stored hashed), optional phone number, optional email, optional pay rate
• Punch records: clock-in / clock-out timestamps, optional job code, optional note
• Optional location data (latitude/longitude) at punch time if the business uses our Mobile or Geofence features
• Optional photo (selfie) at punch time if the business uses our Photo-on-Punch feature
• SMS opt-in status

Automatically collected:

• IP address of the device that punches in or accesses the admin panel
• Approximate location for security audit purposes

2. How we use it

• Operate the service (record punches, compute payroll hours, send alerts)
• Send SMS reminders to employees and alerts to owners (only when the business turns those features on)
• Bill the business owner via Stripe based on employee count and plan
• Email transactional messages (password resets, payment receipts, alerts)
• Investigate fraud, abuse, and security incidents
• Comply with legal obligations

3. How we share it

We do not sell or rent personal information. We share data only with the service providers strictly necessary to run JobPunch:

• Stripe — payment processing
• Telnyx — SMS delivery
• Our infrastructure provider — server hosting (currently the office of South Bend IT Solutions LLC, with planned migration to a US-based cloud provider as the service grows)
• Legal compliance — only if required by valid subpoena, court order, or law

4. Your business is the data controller for your employees

When a business owner adds employees to JobPunch, that business — not JobPunch — is the data controller of the employee records. JobPunch is the data processor. Disputes about whether an employee should be tracked must be resolved between the employee and the employer; JobPunch will not unilaterally delete records at an employee's request without the business owner's approval.

5. Data retention

• Active accounts: indefinitely while the account is active
• Cancelled accounts: 90 days then permanent deletion (we can extend on written request for compliance/audit reasons)
• Daily database backups: retained 30 days

6. Your choices

• Access / export: Business owners can export their data at any time as CSV from the admin panel
• Correction: Edit any employee record, schedule, or punch from the admin panel
• Deletion: Cancel your account from the Stripe Customer Portal and contact us to request deletion of stored data
• SMS opt-out: Reply STOP to any SMS to unsubscribe immediately. Reply START to re-subscribe.
• California (CCPA) and EU (GDPR) residents: You have additional rights to know, delete, correct, and opt-out of data sales. Email [email protected] — we will respond within 30 days.

7. Security

We hash all passwords with scrypt. PINs are also hashed. Payment cards are never stored by us — Stripe holds those. We use HTTPS for all traffic. Our database is encrypted at rest. We follow industry-standard security practices but cannot guarantee absolute security; you should use a unique, strong password.

8. Children

JobPunch is intended for use by businesses to track adult employee work hours. We do not knowingly collect information from anyone under 18.

9. Changes to this policy

We will post any material changes here and email account owners at least 14 days before they take effect.

10. Contact

Questions: [email protected] or write to:

South Bend IT Solutions LLC, South Bend, IN