Privacy Notice
Effective October 8, 2026
This notice covers Workpindle at usehourwell.com. Free tools are available; Pro is an optional paid subscription.
Information used by Workpindle
When you sign in, Supabase verifies your email using a one-time code. Workpindle stores your account identifier, email address, and a session record. Existing records may be linked when you verify the same email while authenticated to your previous account. When you save information, Workpindle stores your shifts, breaks, rates, adjustments, and relevant timestamps. It also records the version and time of terms acceptance, and links your account to a Stripe customer identifier when checkout is available.
Purpose and service providers
Information is used to save and retrieve your timesheets, calculate reports, manage account access, record consent, and check subscriptions. OpenAI’s Sites platform and its hosting infrastructure provide hosting and database services. Supabase provides email authentication, and Resend delivers sign-in messages using your email address. Stripe processes checkout, billing details, and subscription management under its own privacy policy. Workpindle does not receive or store your full payment card number. Payment status is checked with Stripe to determine Pro access.
Cookies and remembering your sign-in
Workpindle uses a secure sign-in cookie to recognize your account and protect access to your saved timesheets. It contains a random session identifier, not your email address or timesheet contents. The server stores a hashed version of that identifier with your account, email address, and session expiration time.
If you select “Remember me,” your sign-in cookie and session can remain valid for up to 30 days on that browser. If you leave it unchecked, Workpindle uses a browser-session cookie and limits the server session to 24 hours. Some browsers restore session cookies when reopening previous tabs, so closing your browser may not sign you out immediately.
You can end your current session using Sign out in the account menu. Clearing cookies removes the browser’s sign-in information but does not delete your saved records. Blocking cookies may prevent sign-in and account features from working. For a shared device, leave “Remember me” unchecked and sign out when finished.
Our hosting and authentication providers may also use cookies and technical information to protect the service from abuse. Workpindle uses short-lived hashed request identifiers derived from network information to limit repeated sign-in attempts. Workpindle does not use advertising cookies or marketing analytics.
Team workspaces
If you create or join a team, Workpindle stores team names, invited email addresses, membership roles, display names, and invitation decisions. Hours you explicitly submit to that team are visible to its owner and managers. Employees can see their own team submissions. Team membership does not share your personal timesheets, rates, drafts, schedules, or other teams’ information.
Submitted hours and review decisions are retained with revision records, reviewer details, comments, and timestamps. Removing a member ends their team access but does not delete their submitted records. Team owners and managers can export approved hours. Invitations appear in the invited account and expire after seven days; invitation emails are not sent automatically.
Team messages
Workpindle stores chat messages, sender email addresses, timestamps, and the last message each member has read to keep unread counts in sync. Private manager–employee conversations are accessible only to their two participants while they have active team access; other managers do not receive access merely because of their role. Team chats are visible to all active members, including members who join later. Removing a member ends their chat access but does not delete messages they sent. Messages are retained with the team’s records. Unsent chat drafts stay in the open browser tab and are not saved to your account. Chat updates while open; email and push notifications are not sent.
Temporary browser drafts
Workpindle stores your current unfinished timesheet in this browser so it can be restored after a refresh or return visit. This draft includes shifts, breaks, job labels, the hourly rate, and the selected week. It does not sync to other devices. Signed-in drafts are separated by account, while signed-out use shares a guest draft in the same browser. Use Discard draft to remove it, or Save week to keep the completed version in your account. Signing out removes the current account’s browser draft. Clearing site data also removes browser drafts.
Retention and your choices
Your saved records remain associated with your account so you can return to them. Canceling Pro does not automatically delete your free account or saved timesheets. You can download timesheets and, while subscribed, pay-period reports. Resetting compensation removes adjustments and resets which saved weeks count toward that total; it does not delete the saved timesheets.
For access, correction, or deletion requests contact Workpindle at jcjohnson1106@gmail.com. Some records may need to be retained for security, billing, dispute resolution, or legal obligations. Signing out ends your current sign-in session but does not erase stored records.
Security and notices
Workpindle restricts saved records to the signed-in account and uses secure connections, but no online service can guarantee absolute security. The sign-in and hosting providers may use cookies or similar technology for authentication and security. This Workpindle implementation does not include advertising or marketing analytics.
Material updates to this notice will be reflected here with an updated effective date. See the Terms of Service for subscription conditions.