WorkTalora

Privacy Notice

Last updated: July 20, 2026

This Privacy Notice explains how Summit App Company LLC("Summit App Company", "we", "us", or "our"), operating the WorkTalora service (the "Service"), collects, uses, and shares personal data. Summit App Company LLC acts as the data controller for personal data collected through the Service.

1. Personal Data We Collect

  • Account data: name, email address, login credentials, role (manager/employee), company affiliation.
  • Workforce data: schedules, shift assignments, time entries, clock-in/out timestamps, breaks, notes, time-off requests, hourly rates, and PINs used with the shared time-clock mode.
  • Support communications: messages and content you send when contacting support.
  • Usage and device data: IP address, device identifiers, browser type, operating system, timestamps, and interaction telemetry needed to operate and secure the Service.
  • Push token data: device push notification tokens, if you opt in to notifications.

2. How We Use Personal Data

  • Provide, maintain, and improve the Service, including scheduling, time tracking, and payroll snapshots.
  • Create and manage accounts and company memberships.
  • Send transactional communications (e.g., invitations, password resets, notifications).
  • Prevent fraud, abuse, and security incidents.
  • Comply with legal obligations and enforce our Terms.

3. Legal Bases

Where GDPR or similar laws apply, we rely on the following legal bases:

  • Contract: to provide the Service you or your employer subscribed to.
  • Legitimate interests: to secure the Service, prevent abuse, and improve our product.
  • Consent: for push notifications and any optional features you opt into.
  • Legal obligation: to comply with applicable law.

4. Sharing Personal Data

We share personal data with the following categories of recipients:

  • Service providers / subprocessors: cloud hosting, database, email delivery, push notification providers, and analytics tooling that operate the Service on our behalf.
  • Merchant of Record: Paddle.com handles the sale of subscriptions, payments, billing, subscription management, tax compliance, and invoicing. Payment data is collected directly by Paddle under their own privacy notice.
  • Your company: managers in your company can see workforce data you generate as part of the Service (schedules, time entries, notes).
  • Professional advisers: legal, accounting, and compliance advisers, under confidentiality.
  • Authorities: when required by law, valid legal process, or to protect rights and safety.

5. International Transfers

Personal data may be processed in countries other than your own, including the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Data Retention

We retain personal data for as long as your account or company remains active, and for a reasonable period afterward to meet legal, accounting, or reporting obligations. When no longer needed, data is deleted or anonymized. Company owners can contact support to request data export or deletion.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent at any time. Users in the UK/EEA also have the right to lodge a complaint with a supervisory authority. We aim to respond to verified requests within one month.

8. Security

We implement appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, row-level security in our database, and least-privilege access for our team.

9. Cookies

The Service uses cookies and similar technologies that are strictly necessary for authentication and to keep you signed in. We do not use advertising cookies. Where analytics cookies are used, they are limited to product improvement and can be managed via your browser settings.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from them.

11. Changes

We may update this Privacy Notice from time to time. Material changes will be communicated through the Service or by email.

12. Contact

Summit App Company LLC — privacy inquiries can be submitted through the in-app support channel.