Privacy Policy

1. Information We Collect

We collect information you provide directly: name, email, company name, and payment information when you subscribe. We also collect usage data (pages visited, features used) to improve the Service.

2. Mobile Application Data

Our mobile apps (PinnacleHR and PinnacleFN) request additional device permissions to provide specific features. Here is exactly what each is used for, and nothing more:

• Location. PinnacleHR uses your device's location to confirm you're on-site when you clock in. Location is only read in the foreground, while the app is open — never in the background — and you can decline it and clock in without GPS instead.
• Camera and photo library. Used to attach a receipt photo (PinnacleFN) or a profile picture (PinnacleHR) when you choose to add one.
• Biometric unlock. Face ID / fingerprint unlock is handled entirely by your device's own operating system. We never receive, see, or store your biometric data.
• Push notifications. If you enable notifications, we store a device-specific push token plus basic device information (device ID, platform, OS and app version) so we can deliver and manage them.
• Offline storage. Our mobile apps cache your data locally on your device so you can keep working without an internet connection. This local copy is cleared when you sign out.

3. How We Use Your Information

We use your information to: provide and maintain the Service, process payments, send service-related communications, and improve our products. We do not sell your personal data to third parties.

4. Data Security

All data is encrypted in transit (TLS 1.3) and at rest. Each tenant's data is strictly isolated — no other business can access your records. We run automatic backups daily.

5. Data Retention

We retain your data for the duration of your subscription plus 90 days. After that, data is permanently deleted. You can request early deletion by contacting us.

6. Cookies

We use essential cookies for authentication and session management. We use analytics cookies (PostHog) to understand how the Service is used. You can disable analytics cookies in your browser settings.

7. Third-Party Services

We use the following third-party services: Convex (database and backend), Vercel (hosting), Resend (email notifications), and PostHog (analytics). Each is bound by their own privacy policies and our data processing agreements.

8. Your Rights

You have the right to: access your data, correct inaccurate data, export your data, request deletion, and withdraw consent. Contact us at privacy@remaccs.com to exercise these rights.

9. Changes

We may update this policy from time to time. We will notify you of significant changes via email or in-app notification.