Clockroll privacy policy
Clockroll is an attendance, time-tracking and payroll app operated by Vexel Graph Technologies Private Limited under the Vexel Labs brand. This policy covers the Clockroll web app and its Android and iOS apps.
Who controls the data
Clockroll is used by businesses ("employers") to manage their teams. The employer decides what data about its workers goes into Clockroll and why, so the employer is the data fiduciary (controller) for that data. We process it on the employer's behalf and only to provide Clockroll. For account holders' own sign-up and billing details, we are the data fiduciary.
Data Clockroll processes
- Account details: name, email address, phone number and role (admin, manager or worker).
- Worker records: employment details such as department, designation, reporting manager, joining and exit dates; address and emergency contact; documents the employer uploads.
- Pay details: salary structure, bank account number and IFSC, UPI ID, advances and repayments, payroll results and payslips, and statutory deduction amounts where the employer turns them on.
- Attendance and time: check-in and check-out times, the device's location at check-in and check-out, a selfie photo at check-in when the employer requires it, rosters, leave requests and time entries.
- Performance data: sales or activity records the employer or its other software sends to Clockroll to calculate variable pay, targets, and appraisal ratings and comments.
- Technical data: log records such as IP address, device and browser type, kept to secure the service.
Device permissions
- Location is read only when a worker taps check in or check out, to record where it happened and to compare it with the workplace boundary the employer set. Clockroll does not track location in the background.
- Camera is used only to take a check-in selfie when the employer requires one. Photos are stored as attendance proof. Clockroll does not use face recognition.
How the data is used
Only to provide Clockroll: recording attendance and time, calculating pay and producing payslips and payroll files, routing approvals, showing workers their own records and earnings, keeping the service secure, and answering support requests. We do not sell personal data, use it for advertising, or use it to train AI models.
Who can see it
Within an employer's account, access follows the roles the employer sets. Workers see their own records. Managers see their team's records, and see pay details only if the employer allows it. Admins see everything in their business.
We use these service providers to run Clockroll:
- Supabase, for the database, sign-in and file storage. Data is hosted in Singapore.
- Cloudflare, for hosting the web app.
When paid plans launch, a payment provider will process billing details. This list will be updated before any new provider receives data. We disclose data to authorities only when the law requires it.
How long it is kept
Data is kept while the employer's account is active. When an employer closes its account, or asks us to delete data, we delete it within 30 days, except records the law requires us to keep. Employers may need to keep payroll and attendance records for longer under labour and tax laws, so they should export what they need before closing the account.
Security
Data is encrypted in transit. Every business's records are separated by access rules enforced in the database. Pay calculations run on our servers, not on the device.
Your rights
You can ask to access, correct or erase your personal data, and to nominate someone to act for you. If an employer added your data, contact your employer first, because they control your records. You can also write to privacy@vexellabs.org and we will pass the request to your employer or act on it where we are responsible. See how to delete a Clockroll account.
Children
Clockroll is meant for businesses and their working-age staff, not for children.
Grievances and contact
Grievance officer: Varun Jakkidi, Director, privacy@vexellabs.org. Vexel Graph Technologies Private Limited, S1-B-156, Sachivalay Nagar Colony, Vanastalipuram, Hayathnagar, Hyderabad 500070, Telangana, India. You may also complain to the Data Protection Board of India.