Privacy Notice

Paidsley is a time-tracking and workforce-compliance service operated by TMH Consulting, Inc. ("we", "us"). This notice explains what we do with personal information. Contact: privacy@paidsley.com · 760-239-9417.

Two different roles, two different sets of rules

• When you visit paidsley.com, we decide what happens with your information. For that information we are a business under the California Consumer Privacy Act (as amended by the CPRA), and this notice governs.
• When an employer uses Paidsley to track its team's time, that employer decides what is collected and why. For that information we are a service provider acting on the employer's instructions. We do not use it for our own purposes. If you are an employee and want to see, correct, or delete your data, contact your employer - they control it. We will help them respond.

What we collect

From visitors to paidsley.com

Information you send us (name, email, phone, message content) and, only if you consent, analytics and advertising identifiers. Nothing loads before you choose - see "Tracking".

From employees, on behalf of their employer

Name, employee number, email, phone, home address, date of birth, the last four digits of a Social Security number, pay rate, punch times, precise geolocation captured at the moment of a punch (not continuously), photographs of receipts submitted for reimbursement, voice recordings when an employee uses voice clock-in, time-off and sick-leave records, and messages sent through the app.

Sensitive personal information

Precise geolocation and Social Security number digits are sensitive personal information under the CPRA. We collect them only to perform the service - to record where a punch happened and to support payroll and wage-statement obligations. We do not use or disclose sensitive personal information for any purpose beyond performing the service, which means the CPRA right to limit its use does not restrict anything further. We do not use it to infer characteristics about anyone.

Tracking

No analytics or advertising tag runs on this site until you opt in. If you accept, we may load Google (Google Tag Manager, Google Analytics, Google Ads) and Meta (Facebook Pixel), and those companies receive information about your visit. You can change or withdraw your choice any time via "Privacy choices" in the footer of every page. We honor the Global Privacy Control browser signal: if your browser sends it, advertising stays off by default.

We do not sell or share your personal information

We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined by the CPRA. We have not done so in the preceding twelve months. We do not knowingly collect personal information from anyone under 16.

Who we disclose to

We use service providers under contract to help us run Paidsley:

Each is bound by contract to use the information only to provide its service to us. We may also disclose information if the law requires it.

How long we keep it

Employer data is kept for as long as the employer's account is active, and afterward as the employer directs, subject to any retention period the law requires of them - California requires employers to keep time records for at least three years. Visitor data is kept only as long as needed for the purpose it was collected.

Your California rights

• Know what we collect and why
• Delete
• Correct
• Opt out of sale or sharing (we do neither)
• Limit the use of sensitive personal information
• Non-discrimination - we won't treat you worse for exercising any of these

To exercise a right, email privacy@paidsley.com or call 760-239-9417. We verify requests before acting. You may use an authorized agent. If you are an employee of a company that uses Paidsley, send your request to your employer - we hold that data on their behalf and will route your request to them.

Changes

We'll post changes here and update the date above.

See also our Data Processing Addendum.