PunchPointPunchPointBack to home

Privacy Policy

Last updated: August 6, 2026

This Privacy Policy explains how BYSPRK, a sole proprietorship doing business as PunchPoint ("PunchPoint," "we," "us," or "our"), collects, uses, discloses, and protects personal information in connection with the PunchPoint web dashboard and mobile app (the "Service"). It applies to organization owners and managers, and to the employees they invite.

PunchPoint is designed to be used by a business (the "organization") to manage its own workforce. In most cases, the organization is the one deciding what employee information to collect and why, and PunchPoint acts on the organization's behalf to store and process it. If you're an employee with questions about how your information is used, your employer — the organization you were invited to — is usually the right place to start, in addition to contacting us directly.

1. Who We Are

PunchPoint is operated by BYSPRK, a sole proprietorship based in Prince Edward Island, Canada. For privacy questions, requests, or complaints, contact our designated privacy officer at support@punchpoint.ca.

2. Information We Collect

We collect the following categories of information:

  • Account & organization information: name, work email, phone number, company name, and pay-period settings provided when creating or joining an organization.
  • Employee information: name, email, phone number, employee number, hourly pay rate, employment status, and job site assignments, entered by the organization owner or manager who invites an employee.
  • Time and location data: clock-in and clock-out timestamps, break periods, and GPS coordinates captured at the moment an employee clocks in or out, used to verify proximity to an assigned job site. We do not continuously track location in the background outside of these events.
  • Timesheet and pay data: hours worked, overtime, timesheet approvals, corrections, and pay-period exports.
  • Payment information: handled directly by our payment processor, Stripe. PunchPoint does not receive or store full payment card numbers.
  • Device and usage information: basic technical information such as IP address, browser or device type, and app usage, for security and troubleshooting purposes.

3. How We Use Information

We use the information described above to:

  • Provide, operate, and maintain the Service, including GPS-verified clock in/out and timesheet approval;
  • Process subscription payments and manage billing through Stripe;
  • Send account, invitation, and service-related emails, including through Resend;
  • Enforce plan limits and prevent misuse (e.g. blocking a duplicate active membership across organizations);
  • Provide customer support;
  • Maintain the security and integrity of the Service; and
  • Comply with legal obligations.

We do not use employee location or timesheet data for advertising, and we do not sell personal information.

4. Location Data

Location data is collected only when an employee actively taps to clock in or out in the mobile app, and is used solely to check whether the employee was within the allowed radius of the assigned job site at that moment. It is stored as part of the corresponding time entry so it can be reviewed by an organization's owner or manager, alongside the timestamp and accuracy reading. Employees should be informed by their employer, before their first clock-in, that this location check takes place.

5. How We Share Information

We share information with the following categories of service providers, solely to operate the Service on our behalf, under contractual obligations to protect it:

  • Stripe — payment processing and subscription billing.
  • Supabase — database, authentication, and application hosting.
  • Resend — delivery of account, invitation, and notification emails.

We may also disclose information if required to do so by law, or to protect the rights, property, or safety of PunchPoint, our users, or others. We do not otherwise sell, rent, or share personal information with third parties for their own marketing purposes.

6. Data Retention

We retain Customer Data for as long as an organization's account is active. When an employee is removed from an organization, we deactivate their access but retain their existing time entries and paystub records rather than deleting them, to preserve the organization's payroll and audit history. If an organization's subscription is cancelled, we retain the organization's data rather than automatically deleting it, so an owner can resubscribe without losing their history. You can request deletion of your organization's data as described in Section 8, subject to any records we're required to keep by law.

7. Security

We use industry-standard measures to protect personal information, including encryption of data in transit, access controls that restrict each organization's data to its own members, and secure authentication. No method of transmission or storage is completely secure, and we can't guarantee absolute security.

8. Your Rights

Depending on your location, you may have the right to access, correct, or request deletion of your personal information, or to withdraw consent for its collection where consent is the basis for processing. If you're an employee, some of these requests may need to go through your employer, as the organization that manages your PunchPoint account. To make a request, contact us at support@punchpoint.ca. If you're not satisfied with our response, Canadian residents can contact the Office of the Privacy Commissioner of Canada.

9. Additional Rights for Quebec Residents

If you reside in Quebec, Quebec's Act respecting the protection of personal information in the private sector gives you additional rights, including the right to be informed of and consent to certain collection and use of your personal information, the right to request that we cease disseminating your personal information or de-index a hyperlink giving access to it in certain circumstances, and the right to data portability. Our designated person in charge of the protection of personal information can be reached at support@punchpoint.ca. If you're not satisfied with our response, you may contact Quebec's Commission d'accès à l'information.

10. International Users

Our service providers may process and store information in Canada or other countries where they operate. Where information is transferred outside your country of residence, it may become subject to the laws of that jurisdiction.

11. Children's Privacy

The Service is intended for business use by working adults and is not directed at children. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll provide reasonable notice, such as by email or an in-app notice, before the changes take effect.

13. Contact

Questions, requests, or complaints about this Privacy Policy can be sent to support@punchpoint.ca.