Privacy Policy | BusinessHRM

This Privacy Policy explains how BusinessHRM (“we”, “us”, “our”) collects, uses, discloses and protects personal information when you visit businesshrm.com, use the BusinessHRM application, or interact with us. By using our services you agree to the practices described here.

1. Who we are

BusinessHRM provides an all-in-one platform for HR, time tracking, projects, CRM, finance and support. Where we provide the service to your employer or another organisation, that organisation is the controller of the personal data processed in their workspace, and we act as a processor on their behalf.

2. Information we collect

Information you provide. Account details such as name, work email, company, role, and billing information. Content you enter into the product, including employee records, projects, clients, invoices, and messages.

Information collected automatically. When you use the app we collect usage data, device and browser information, IP address, and log data. Where time tracking is enabled by your organisation, this may include timesheets, application and website activity, activity levels derived from input counts, and optional screenshots, according to the settings your administrator chooses.

Information from your employer. If your organisation provisions an account for you, they may provide your contact and role information.

We do not record the content of keystrokes. Activity levels are calculated from counts of clicks and key presses only.

3. How we use information

We use information to provide and operate the service, authenticate users, process payments, provide support, improve and secure the product, communicate with you about your account, and comply with legal obligations. We process personal data on the basis of contract performance, legitimate interests, your consent where required, and compliance with law.

We share information with service providers who help us run the platform (such as hosting, payment processing, and email delivery) under contracts that require them to protect it. We may share information to comply with law, enforce our terms, or protect rights and safety. If we are involved in a merger or acquisition, information may be transferred subject to this policy. We do not sell personal information.

5. Google user data

BusinessHRM offers optional “Sign in with Google” and Google Calendar features. This section explains exactly what we access from your Google account and how we use it.

Sign in with Google. If you choose to sign in or sign up with Google, we receive your name, email address and profile picture (the openid, email and profile scopes). We use them only to identify you, create or link your BusinessHRM account, and show your name and picture in the app. We do not request access to any other Google data at sign-in.

Google Calendar. A user (My Profile → Google Calendar) or a company administrator (Settings → Google Calendar) can choose to connect a Google Calendar. Only then do we request calendar access, and we use it only to:

read free/busy times, so appointment booking pages never offer a time when the host is already busy;
create, update and delete the events that BusinessHRM itself creates for you, such as booked appointments (with Google Meet links when chosen), tasks assigned to you, approved leave, company events, holidays and interview schedules;
read the calendar’s time zone, so events are created at the correct local time.

We do not read the content of your other calendar events, share your calendars, change calendar permissions or delete calendars.

Storage and sharing. We store only the access token needed to keep the connection working and the IDs of the events we created, stored securely on our servers. We do not sell Google user data, use it for advertising, or share it with third parties, except service providers that host our platform on our behalf, or where required by law. Our staff cannot read your Google data except when you ask us for support, for security purposes, or where required by law.

Limited Use. BusinessHRM’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting. You can disconnect Google Calendar at any time in BusinessHRM (My Profile → Google Calendar, or Settings → Google Calendar), which deletes the stored token. You can also remove BusinessHRM’s access at myaccount.google.com/permissions. To have Google-derived data deleted from your account, contact us using the details below.

6. Data retention

We retain personal information for as long as your account is active and as needed to provide the service. After an account is closed we retain data for a limited grace period to allow recovery and to meet legal obligations, then delete or anonymise it.

7. Security

We protect information using encryption in transit and at rest, access controls, and monitoring. No method of transmission or storage is completely secure, but we work continuously to safeguard your data. See our Security page for more.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing. Where we process data on behalf of your organisation, please direct requests to them and we will assist. To exercise rights with us directly, contact us using the details below.

9. International transfers

We may process and store information in countries other than where you live. Where we transfer personal data internationally, we use appropriate safeguards as required by applicable law.

10. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

11. Children

Our services are not directed to children, and we do not knowingly collect personal information from anyone under 16.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the date above. Significant changes will be communicated where appropriate.

13. Contact us

For privacy questions or requests, email or write to BusinessHRM, 2261 Market Street, Suite 4512, San Francisco, CA 94114.