DRAFT FOR LEGAL REVIEW · AUGUST 23, 2026

Privacy notice

This pre-launch notice describes the intended ClockTrail data practices. ClockTrail is a NoobLyf brand. This notice is not final legal advice and must be reviewed before public launch.

Data we expect to process

Account and company details, employee directory information, clock and break timestamps, correction and approval records, subscription state, support requests and optional screenshots, security events, and limited delivery and audit records needed to operate the service.

Why we process it

To provide time tracking, secure accounts, create payroll exports, administer subscriptions, prevent abuse, answer support and privacy requests, and improve the product using limited website and milestone analytics.

Service providers

The planned providers are Microsoft 365 for company communications, Supabase for authentication and data hosting, Stripe for hosted billing, Resend for transactional email, Sentry for filtered error diagnostics, PostHog for privacy-limited website and product analytics, and the selected web host.

Analytics and monitoring

Public website analytics include pseudonymous page visits, broad device and browser categories, referring domains, and safe campaign labels. A random first-party identifier distinguishes repeat visitors without creating a customer profile. Global Privacy Control and browser Do Not Track signals disable website analytics. Session replay, form capture, and automatic tracking on authenticated employee or company pages remain disabled. Names, emails, punch timestamps, correction reasons, card data, message bodies, and URL query strings are prohibited from analytics. Error events are filtered before delivery and default personal-information capture is disabled.

Your choices

Company owners can export company data and submit a reviewed closure request in Settings. Employees should contact their company owner for employment-record questions. Privacy questions can be sent to support@nooblyf.com.

Retention

Raw analytics are retained for no more than 12 months under the current internal schedule, subject to legal review. Cancellation does not silently delete required business records.