GYSIO
Back home

Privacy Policy

Last updated October 26, 2026

This Privacy Policy explains how GYSIO Business & Bookkeeping, Inc. (“GYSIO,” “we,” “us”) collects, uses, and protects information through GYSIO Time & Payroll (the “Service”), including for businesses, their employees, and individuals who use the Service directly.

Information we collect

  • Account information: name, email address, password (stored as a one-way hash, never in plain text), role, and business affiliation.
  • Time and work data: clock-in/clock-out times, schedules, day notes, and any files or receipts you attach to them.
  • Messages: content of messages sent within the Service, including file attachments.
  • Billing information: for paid plans, payment is processed by Stripe, Inc. GYSIO does not store full card numbers.
  • Usage data: basic, privacy-preserving analytics (pages visited, general device/browser type) via Vercel Analytics — no cross-site tracking or ad identifiers.

How we use information

We use this information to provide and operate the Service, including:

  • Recording and displaying time worked, schedules, and payroll approval status.
  • Delivering messages and notifications (including by email) between employees, businesses, and GYSIO.
  • Processing subscription payments and billing.
  • Maintaining an internal record at GYSIO for support, accuracy, and payroll-processing purposes.
  • Improving and securing the Service.

Who we share information with

We don't sell personal information. We share it only with service providers who help us run the Service — Vercel (hosting), Neon (database), Stripe (payments), and our email provider (transactional email delivery) — and only as needed for them to perform that function. Within a business account, an employer can see their own employees' time and note data; GYSIO staff can see data across the clients we service, for payroll and support purposes.

Data retention

We retain account and time-tracking data for as long as the account is active, and as needed to meet recordkeeping obligations that commonly apply to payroll and employment data. You can request deletion of your account by contacting us (below); some records may be retained where required by law.

Security

Passwords are hashed, not stored in plain text. Data is transmitted over encrypted connections (HTTPS). Access to business data is restricted by account role. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

Your choices

You can access and update your account information while signed in. To request a copy of your data, or to request deletion, contact us at the email below.

Children's privacy

The Service is intended for business use by adults and is not directed to children under 16.

Ownership

This website and the tools on it — including GYSIO Time & Payroll and the free wage calculator — are owned by GYSIO Business & Bookkeeping, Inc. and may not be copied, duplicated, or reproduced without our permission. See our Terms of Service for details.

Changes to this policy

We may update this policy from time to time. We'll update the date at the top when we do.

Contact us

Questions about this policy or your data:

payroll@gysio.org or visit gysio.org.