Legal

Privacy Policy

OnSyte Mobile Application

Effective Date: January 12, 2026

1Introduction

OnSyte ("we," "our," or "us") provides a workforce management mobile application (the "App") that enables employees to clock in and out of work, verify their identity, and track attendance. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our App on iOS or Android devices.

By downloading, installing, or using the OnSyte App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use the App.

2Information We Collect

2.1 Location Data

We collect precise geolocation data from your device to verify your presence at designated work sites. Important details about our location data collection:

  • Location is collected ONLY while you are actively clocked in
  • A visible indicator is displayed in the App whenever location tracking is active
  • Location tracking stops immediately when you clock out
  • You are automatically clocked out after 12 hours, which also stops location tracking
  • We do NOT track your location outside of work hours
  • Location data is used solely to verify work site attendance
  • You can view your location history within the App

2.2 Photographs

We collect photographs (selfies) taken at the time of clock-in for identity verification purposes:

  • A selfie is required each time you clock in to verify your identity
  • Photos are used only for attendance verification by your employer
  • Photos are securely stored with encryption
  • Photos are never used for facial recognition training

2.3 Time and Attendance Data

We collect records of your work hours, including:

  • Clock-in and clock-out timestamps
  • Duration of work sessions
  • Work site assignments
  • This data is used for timesheet generation and payroll processing

2.4 Device Information

We may collect certain device information to ensure proper App functionality:

  • Device type and operating system version
  • Unique device identifiers
  • App version
  • Push notification tokens (if notifications are enabled)

2.5 Biometric Authentication Data

If you enable Face ID or Touch ID for app authentication:

  • Biometric data is processed entirely on your device by your operating system
  • We NEVER receive, store, or have access to your actual biometric data
  • We only receive a confirmation of successful authentication

2.6 Personal Contact Information

We collect and store personal contact information provided during account registration and profile setup:

  • Full name
  • Address
  • Email address
  • Phone number
  • This information is used for account identification, communication, and employment verification purposes

3How We Use Your Information

We use your personal information exclusively for:

  • Verifying your presence at designated work sites during work hours
  • Confirming your identity when clocking in
  • Generating accurate timesheets for payroll processing
  • Providing your employer with attendance records and verification
  • Sending work-related notifications (if enabled)
  • Improving App functionality and user experience
  • Complying with legal obligations

4Information Sharing and Disclosure

We do NOT sell, rent, or share your personal information with third parties for marketing or advertising purposes.

Your information is shared only with:

4.1 Your Employer

The App supports connections to multiple employers. Your attendance data, clock-in photos, and location verification data are shared only with the employer you are currently clocked in with. Each employer can only access data from work sessions performed for them. Your employers may also share work site locations with you through the App to facilitate clock-in at designated locations. Employers are bound by their own privacy obligations regarding your data.

4.2 Service Providers

We may share information with trusted service providers who assist us in operating the App, such as cloud hosting providers and data storage services. These providers are contractually obligated to protect your information and use it only for the services they provide to us.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5Data Security

We implement robust security measures to protect your personal information:

  • All data is encrypted in transit using TLS/SSL
  • All data is encrypted at rest using industry-standard encryption
  • Access to personal data is restricted to authorized personnel only
  • We conduct regular security assessments and updates
  • Secure authentication mechanisms protect your account

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

6Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

  • Attendance records and clock-in photos are retained according to applicable employment and tax law requirements (typically 3-7 years depending on jurisdiction)
  • Location data is retained for the duration required by your employer for verification purposes
  • Account information is retained while your account is active and for a reasonable period thereafter

When data is no longer needed, it is securely deleted or anonymized.

7Your Rights

Depending on your location, you may have certain rights regarding your personal information:

7.1 General Rights

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information, subject to legal retention requirements
  • Portability: Request your data in a portable format
  • Withdraw Consent: Withdraw your consent at any time (note: this may affect your ability to use the App)

7.2 European Economic Area (EEA) Residents - GDPR Rights

If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR):

  • Right to restrict processing of your personal data
  • Right to object to processing based on legitimate interests
  • Right to lodge a complaint with your local data protection authority

Our legal basis for processing your data under GDPR includes: performance of your employment contract, compliance with legal obligations, and legitimate interests of your employer in workforce management.

7.3 California Residents - CCPA Rights

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected, used, and shared
  • Right to delete personal information
  • Right to opt-out of sale of personal information (we do not sell your data)
  • Right to non-discrimination for exercising your rights

7.4 Exercising Your Rights

To exercise any of these rights, please contact us using the information provided in Section 11 below, or contact your employer directly. We will respond to your request within the timeframe required by applicable law.

8Children's Privacy

The OnSyte App is intended for use by employees who are at least 16 years of age (or the minimum working age in their jurisdiction). We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected information from a child under 16, please contact us immediately so we can delete the information.

9International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your data internationally, we implement appropriate safeguards, such as standard contractual clauses approved by relevant authorities, to protect your information.

10Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by:

  • Posting the updated policy in the App
  • Updating the "Effective Date" at the top of this policy
  • Sending you a notification through the App (for significant changes)

We encourage you to review this Privacy Policy periodically. Your continued use of the App after any changes constitutes your acceptance of the updated policy.

11Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

For data-related requests, you may also contact your employer directly, as they are the primary controller of your employment data.

12Consent

By using the OnSyte App, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.

Specifically, you consent to:

  • Collection of your location data while clocked in for work site verification
  • Collection of photographs for identity verification at clock-in
  • Sharing of your attendance data, photos, and location information with your employer
  • Storage and processing of your data as described in this policy

— End of Privacy Policy —