Privacy Policy

LotHours ("we", "us") provides a workforce management platform for car dealerships. This policy explains what data we collect, how we use it, and the rights you have over it.

What we collect

• Account info — name, email, phone, role, employer. Provided by you or your employer.
• Location — geofence entry/exit and clock events captured by the mobile apps. Used to determine when an employee is on premise. We store latitude, longitude, accuracy, and battery state at the moment of each clock event.
• Messages — internal team messages and customer SMS exchanged via dealership-owned phone numbers, stored to enable conversation history and team handoff.
• Device info — push tokens, app version, OS version, used for notifications and product analytics.
• Usage events — anonymized product analytics (page views, signup funnel) via PostHog.

How we use it

• Operating the timecard, messaging, and customer-SMS features you sign up for.
• Sending product communications: invites, account notices, occasional product updates.
• Diagnostic and security monitoring: error logs, audit trail of admin actions.
• Aggregate analytics to improve the product. We do not sell personal data.

Who can see your data

• Your employer's authorized administrators and managers (within department scope) see your time-tracking and messaging data tied to your role.
• Our small team can access data for support and security.
• Subprocessors: Supabase (hosting + database), Stripe (billing), Twilio (SMS), Resend (email), Vercel (hosting), Sentry (error tracking), PostHog (analytics).

Data retention

Time events and audit logs are retained for the active period of your employer's account plus 7 years to support payroll dispute resolution. Customer SMS retained for 2 years unless your employer configures a shorter window. Account info retained for as long as your account is active.

Your rights

You can request access, correction, or deletion of your data by emailing privacy@lothours.com. Some data — like time events that the employer relies on for payroll compliance — may be retained even after deletion of identifying fields.

Children

The product is not directed at anyone under 16.

Changes

We'll post any updates to this page and notify the org owner of material changes 30 days before they take effect.

Contact

LotHours — privacy@lothours.com. Mailing address: contact us for the current address.

Note: This policy is provided as a starting point. Have your legal counsel review it before launch — we are not lawyers.