Privacy Policy

1. What this covers

This policy explains what personal data CrewClock (run by Dynamics Bridge) stores, why, and what rights you have. It applies to everyone who signs in to a workspace and to the contact details of clients that a Customer enters.

2. Data we store

Account data: name, email address, optional username, password (stored only as a one-way hash), sign-in times, and the browser/IP of active sessions for security.

Work data entered by you or your organization: timesheet entries, leave requests and balances, designation and joining dates, salary and rate settings, payroll results, invoices and payments.

Profile data your organization asks for: phone, address, date of birth, emergency contact, bank details for salary payment, national ID number and uploaded documents (for example a CNIC copy or contract).

Technical data: activity log of changes made in the workspace (who changed what and when), email delivery log, and push-notification subscriptions you enable.

3. Why we store it

To run the Service for your organization: recording hours, approving leave, calculating pay, issuing invoices, sending reminders and reports.

To keep accounts secure and to investigate misuse. To provide support when your organization asks for it.

We do not use your data for advertising, profiling, or training of any model, and we never sell it.

4. Who can see it

People in your own organization according to the role your administrator gives them. Sensitive fields (salary, bank details, national ID, documents) are limited to roles with that permission.

Dynamics Bridge staff may access a workspace only to provide support or maintenance, and such access is recorded.

Service providers we rely on: our hosting provider (Hetzner, Finland) where the database and uploaded files live, and Microsoft 365 for sending email. They process data on our behalf under their own security commitments.

We disclose data to authorities only when legally required.

5. Where and how long

Data is stored on servers in the European Union, encrypted in transit (HTTPS). Daily backups are kept for 14 days on the server and up to 30 days off-site.

Your data is kept for as long as your organization subscribes, and for at least 90 days after a subscription ends so it can be exported or resumed. When the owner asks us to delete the workspace, all of its data and files are removed.

6. Your rights

You can see and correct most of your own data inside the Service (Account and Profile pages). For anything else, or to ask for a copy or deletion of your personal data, contact your organization's owner first, as they control the workspace; you may also write to us directly.

You can turn email and push notifications on or off in your notification settings, and enable two-factor authentication on your account.

7. Cookies

We use only the cookies needed to keep you signed in and to protect sign-in forms. There are no advertising or tracking cookies.

8. Contact

Questions about privacy: contact@dynamicsbridge.com. We may update this policy; the date at the top shows the current version.