HourSquare ("Company," "we," "us," or "our") is committed to protecting the privacy and security of personal information entrusted to us by our users, subscribers, and the individuals whose data is processed through our platform. The following Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you access or use our human resources management platform located at hoursquare.com and our administrative hub (collectively, the "Service" or "Platform").
1. Applicable Legal Framework
Our data processing activities are governed by multiple legal instruments depending on the location of individuals whose data is processed and the nature of the processing activities:
- Law of Georgia on Personal Data Protection (Document No. 3144, enacted 14 June 2023)
- Regulation (EU) 2016/679 (General Data Protection Regulation or GDPR)
- Additional Applicable Laws as the Service expands to additional jurisdictions
2. Categories of Personal Data Collected
2.1 Account and Registration Data
When you create an Account or register for the Service, we collect:
- Identity Information: Full name, job title, company name
- Contact Information: Email address, telephone number, business address
- Credentials: Username and password (stored in encrypted form)
- Billing information: the billing contacts, company name, country and tax ID, used to issue and send invoices. Payments arrive by bank transfer, so HourSquare does not receive card details.
2.2 Technical and Usage Data
When you interact with the Platform, we automatically collect:
- Device Information: Device type, operating system, browser type and version
- Connection Data: IP address, internet service provider, approximate geographic location
- Usage Information: Pages visited, features utilized, session duration
- Log Data: Server logs recording access times and system activity
3. Purposes and Legal Bases for Processing
Service Provision: To create and manage your Account, provide access to the Platform, and fulfill our contractual obligations.
Legal Compliance: To comply with applicable laws, regulations, and legal processes.
Legitimate Interests: To improve and develop the Service, ensure platform security, and prevent fraud.
Consent: For marketing communications and certain types of analytics where required.
4. Data Sharing and Disclosure
We do not sell personal data to third parties. We may share personal data in the following circumstances:
- Service Providers: With third-party providers performing functions on our behalf
- Legal Requirements: When necessary to comply with applicable laws or legal processes
- Business Transfers: In connection with mergers, acquisitions, or asset sales
5. International Data Transfers
Personal data collected through the Platform may be transferred to and processed in countries other than the country in which you reside. When we transfer personal data outside Georgia or the European Economic Area, we implement appropriate safeguards including Standard Contractual Clauses and adequacy decisions.
6. Data Retention
We retain personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Account data is retained during the active subscription period and for a reasonable period thereafter. When a company is deleted, its data is erased. We keep only a copy of the company's data that the company chose to save (for up to 90 days), a short record of who asked for the deletion and when, and the invoices and payments we issued, as accounting records for as long as the law requires. If a deleted company still owes an invoice, we keep its name, tax number and e-mail domain, with the amount, until it is paid.
7. Your Rights
Depending on your location and applicable law, you may have the following rights:
- Access: Request access to your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data in certain circumstances
- Restriction: Request restriction of processing
- Portability: Receive your data in a structured, commonly used format
- Objection: Object to certain types of processing
- Withdraw Consent: Withdraw consent where processing is based on consent
To exercise these rights, please contact us at privacy@hoursquare.com
8. Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.
9. Contact Information
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through a prominent notice on our Platform. Your continued use of the Service after such modifications constitutes your acknowledgment of the modified Privacy Policy.