1. Overview & Scope
OpsCalify (“we”, “our”, or “us”) provides an enterprise-grade operations, HR, shift roster, payroll, and commission automation platform for agencies and delivery teams.
This Privacy Policy governs the processing of personal data and business telemetry collected when organizations register for OpsCalify, configure shifts, invite employees, manage financial quotations, or submit public forms.
Data Processor Commitment: For all employee, shift, attendance, and payroll records entered into a workspace, the subscribing Organization is the Data Controller, and OpsCalify acts strictly as the Data Processor.
2. Information We Collect
We collect information to operate, secure, and deliver the OpsCalify platform services:
- Account & Workspace Data: Subscriber name, work email address, company name, default currency, and billing details.
- Workforce & HR Records: Employee names, job titles, department assignments, shift schedules, punch-in/out timestamps, attendance statuses, and salary configurations.
- Financial & Commission Telemetry: Sales commission rules, deal payout amounts, quotation line items, and expense reimbursement records.
- Technical & Session Logs: IP addresses, browser agent signatures, authentication audit trails, and device metadata required for security enforcement.
3. How We Use Data
Data ingested into OpsCalify is processed solely to fulfill platform functionalities:
- Automated Roster & Payroll Math: Converting attendance records and shift deduction rules into immutable period payroll slips.
- Commission & Profit Computation: Calculating frozen employee payout splits and company profit percentages upon deal acceptance.
- Tenant Boundary Enforcement: Restricting data visibility per
companyIdand activeshiftIdfilters. - Security & Abuse Prevention: Monitoring brute-force login attempts, enforcing RBAC role checks, and maintaining immutable audit logs.
4. Multi-Tenant Data Isolation
OpsCalify operates on a strict multi-tenant architecture designed to guarantee that one organization can never access another workspace’s operational data.
- Database Scope: Every database query is scoped to the authenticated caller’s tenant ID.
- Shift Boundary: Shifts are isolated sub-silos. Employees on Shift A cannot view Shift B rosters or sales unless granted explicit cross-shift permission.
- Encryption Standards: All data is encrypted in transit using TLS 1.3 and at rest using AES-256 storage standards.
6. Data Retention & Audit Logs
Active workspace data is retained for the duration of your active subscription. Upon account termination:
- Workspace owners have 30 days to request a full CSV/PDF data export.
- Financial audit trails and finalized payroll slips are archived in immutable format to satisfy statutory accounting regulations before destruction.
7. Privacy Rights & Contact
Depending on your jurisdiction (GDPR, CCPA, etc.), organization admins and employees may exercise rights of data access, correction, portability, and deletion.
Our legal and security team is available to assist with DPA agreements and compliance requests.