Privacy policy

Who we are

Standwise ("Standwise", "we", "us") provides the Standwise website and service. This policy explains what personal information we collect, how we use it and the choices you have. For questions, email support@standwise.app.

Two roles

On this website, and for our own customer accounts and billing, we decide how personal information is used. In these cases we are the controller.

Inside the Standwise service, we process employee and work information on behalf of the company that uses Standwise (your employer). In this case your employer is the controller and we are its processor. We act only on its instructions and under our data processing agreement with it. If you use Standwise through your employer, its privacy notice also applies, and it is the best first contact for questions about your information.

Information we collect on this website

• Details you send us through forms: name, work email, company, team size and your message, when you request early access, book a demo or contact us.
• Emails you send us: your email address and whatever you include in the message.
• Technical information: IP address, browser type, device information and the pages requested, recorded by our hosting provider to deliver the site and protect it from abuse.
• Usage statistics: pages viewed, the site that referred you, your country, device type and page load times, collected with Cloudflare Web Analytics. It does not use cookies or fingerprinting and does not track you across other sites, and we see this information only in aggregate.

This website does not use advertising or analytics cookies. Our hosting provider may set strictly necessary cookies to protect the site from bots and attacks.

Information processed in the service

• Account and profile information provided by your employer or by you, such as name, work email, role, team, office and manager.
• Attendance records: check-in and check-out times and the work location result (for example, in office or remote). Where your employer enables it, we also store the location reading taken at the moment of check-in or check-out. Location is never tracked in between, and employers can choose to store only whether someone was in the office, or turn location off.
• Time off, remote work and approval records, including balances and, where provided, the reason for a request. Reasons are visible only to people with permission to see them and are never shared in chat announcements.
• Work information synced from connected tools, such as projects, tasks, sprints and assignees, and your standup answers.
• Other employee information your employer chooses to store, such as onboarding tasks, assigned equipment and documents.
• Usage and device information: sign-in events, actions taken in the service, device type and app version, used to run and secure the service and to keep the audit log.

How we use information

• To provide, maintain, secure and support the service your employer has chosen.
• To respond to your requests, arrange demos and, where you asked for it, tell you about early access and product launches.
• To send service messages, such as sign-in emails, reminders, approvals and security notices.
• To manage customer accounts, billing and our legal and accounting obligations.
• To detect, prevent and investigate fraud, abuse and security incidents.
• To understand how the service is used, in aggregate, so we can improve it.

We do not sell personal information, and we do not use customer data to train AI models. Sensitive fields such as compensation, government ID numbers, documents and time off reasons are never sent to AI models.

Legal bases

Where data protection laws such as the GDPR apply, we rely on these legal bases when we act as controller:

• Contract: to provide the service and manage customer accounts.
• Legitimate interests: to respond to enquiries, secure our website and service, and improve our products, where these interests are not overridden by your rights.
• Consent: for optional marketing emails. You can withdraw consent at any time.
• Legal obligation: to keep records required by tax, accounting and other laws.

When we act as processor, your employer is responsible for choosing the legal basis for its use of Standwise.

How we share information

• Within your workspace: information is visible to people in your company according to the roles and permissions your employer sets. You can see what Standwise shares about you and where.
• Connected tools: when your employer connects tools such as Slack, Microsoft Teams, Jira or ClickUp, we exchange data with them to post updates and sync work. Those tools are governed by their own privacy policies.
• Service providers (sub-processors): companies that help us run the website and service, bound by contract to protect the information and use it only to provide their services to us.
• Legal reasons: when required by law or valid legal process, or to protect the rights, safety and property of our customers, our users, the public or Standwise.
• Business transfers: as part of a merger, acquisition or sale of assets, with notice and subject to this policy.

Sub-processors

We use carefully chosen providers for the following purposes:

• Website hosting, security and analytics: Cloudflare.
• Website forms: Formspree, which receives the details you submit through our forms.
• Business email: Google Workspace.
• Service hosting, email delivery, payments and AI processing: providers bound by data processing terms. Customers can request the current list at support@standwise.app, and we notify customers before adding a new sub-processor.

International transfers

Our providers may process information in countries other than yours. Where the law requires it, we protect these transfers with appropriate safeguards, such as the European Commission's standard contractual clauses. Enterprise customers can choose data residency options.

Retention

• Website enquiries are kept for as long as needed to respond and follow up, and then deleted within 24 months unless you become a customer.
• Service data is kept for as long as your employer uses Standwise. When a company leaves, its data is deleted after a short grace period, unless the law requires us to keep it longer.
• Raw location readings are kept only for a short period that your employer can configure.
• Billing and accounting records are kept for as long as tax and accounting laws require.

Security

We protect information with tenant isolation, encryption in transit and at rest, fine-grained access control and audit logging. Our own staff can access a customer workspace only for support, with a stated reason and for a limited time. Read more on our security page.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to restrict or object to certain processing, and to withdraw consent. You can also complain to your local data protection authority.

To make a request about website or marketing information, email support@standwise.app. If your employer uses Standwise, contact your employer first; we will help it respond. We will not discriminate against you for exercising your rights.

Children

Standwise is a workplace service and is not intended for children under 16. We do not knowingly collect their personal information.

Changes

We may update this policy from time to time. We will post updates here with a new "last updated" date and, for significant changes, notify customers in advance.

Contact

Questions or requests about privacy: support@standwise.app.