Privacy Policy

Your employer has chosen Opvane to record your shifts. Here is exactly what it records about you and when.

• Your email address and name, so you can sign in and so your shifts are attributed to you.
• The time you clock in and out.
• Your device’s location at the moment you clock in and clock out, and nothing in between. Opvane does not track you during your shift, on breaks, or off the clock. The location is used to check you are at the shop, and it is stored with the shift so your employer can review it.
• Corrections. If a manager changes a shift, the original times, the new times, who changed them and the reason are all kept.

Your employer is the organization collecting this information, for the purpose of managing your employment and paying you accurately. Opvane processes it on their behalf. If you have questions about why it is collected or want to see what is held about you, ask your employer first; you can also contact us at privacy@opvane.com.

• Account information: email address, name if you provide one, your role at the shop, and the shop you belong to.
• Shop information: shop name, its check-in location and radius, and its timezone. The check-in location is set by an owner or manager standing at the shop.
• Shift records: clock-in and clock-out times, the device location and its reported accuracy at each, the distance from the shop at that moment, and any corrections.
• Billing information: handled by Stripe. We store Stripe’s customer and subscription identifiers and the subscription status. We never see or store card numbers.
• Technical information: server logs with IP address, browser type and the pages requested, kept for security and troubleshooting.

• To let people sign in and to attribute shifts to the right person.
• To verify that a clock-in happened at the shop, which is the service’s purpose.
• To show owners and managers their shop’s hours and to let them correct mistakes.
• To bill the shop for the subscription.
• To keep the service secure and working.

We do not sell personal information, use it for advertising, or profile anyone.

A shop owner consents to this policy when creating a store, and agrees to inform their staff before enrolling them. Under Alberta’s PIPA, an employer may collect employee personal information that is reasonable for managing the employment relationship, provided the employee is told what is collected and why. The section at the top of this page is written to be that notice; owners may share it with staff directly.

Your data is stored in a database located in Canada (Montreal region). To run the service we use a small number of providers, each of which handles only what it needs:

• Supabase (database and sign-in), stored in Canada.
• Vercel (web hosting), which processes requests and may do so in the United States.
• Resend (sends sign-in emails), United States.
• Stripe (subscription billing), which holds the shop’s payment details under its own privacy policy.

Because some processing happens outside Canada, information may be subject to the laws of those countries while it is there.

• Shift records are employment records. They are kept for as long as the shop’s account exists, and stay attached to the shop even after a staff member’s account is removed, because employment standards in Alberta require employers to keep hours records for at least three years. A removed staff member’s name and email are kept on their past shifts for that reason only.
• Account information is deleted when the account is deleted, subject to the point above.
• Server logs are kept for a short period by our hosting provider and then discarded.
• When a shop closes its account, its data is deleted after a notice period that gives the owner time to export it.

All traffic is encrypted in transit. Every database query runs under the signed-in person’s own permissions, so a shop can only ever read its own rows, staff can only see their own shifts, and shift records cannot be edited except through the correction process that records who changed what. Sign-in is by single-use email link; there are no passwords to leak.

You can ask to see the personal information we hold about you, ask us to correct it, or ask questions about how it is used. Staff should ask their employer first, since the employer is the organization responsible for the collection; either can contact us at privacy@opvane.com. We respond within 30 days. If you are not satisfied, you may contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.

Opvane is for workplaces. Shops must not enrol anyone below the legal working age in their province.

If we change this policy in a way that matters, we will email store owners before the change takes effect and update the date at the top of this page.

Privacy questions: privacy@opvane.com. Opvane Inc., Alberta, Canada.