Privacy Policy

Last updated 2026-10-12

This policy explains what information Spaulding Labs LLC collects through MetalTrack:Time, how we use it, and the choices you have. It covers the MetalTrack:Time web portal, the MetalTrack:Time iPad app, the browser kiosk, other time-clock devices, and our connection to QuickBooks Online.

Information we collect

• Account and contact information — for each portal user: first and last name, email address, phone number, and password (stored only as a salted hash). For the business: company name and postal address. Two-step verification secrets are encrypted at rest, and recovery codes are stored only as hashes.
• Sign in with Apple or QuickBooks — if you use or link either, the account identifier Apple or Intuit issues for you and the name and email address it shares when you sign in. We never receive your Apple or Intuit password.
• Mobile number and text messages — if you add a mobile number for text-message two-step verification or account alerts: the number, whether it is verified, your alert preference, and any STOP or START reply. Verification codes are sent and checked by our text-message provider, Twilio.
• Business identifiers — your assigned Business ID and, after you connect QuickBooks, your QuickBooks company name, company ID (realm), and time zone.
• Employee information — employee display names and QuickBooks employee IDs read from QuickBooks Online, so you can choose who uses the time clock, and the clock number you assign to each person. Names and clock numbers are encrypted at rest.
• Time-clock data — each clock-in and clock-out (the employee, the time it was tapped, the time it reached us, and the kiosk used), and the shifts built from them: one time activity for each clock-in and clock-out pair, with its start time, end time, and hours.
• Kiosks and the iPad app — for each paired tablet: the name you give it, when it was paired and last checked in, and its IP address. The MetalTrack:Time iPad app and the browser kiosk keep their pairing key, a copy of your employee list (names and clock numbers) for use during an internet outage, and any punches waiting to be sent on the tablet itself. The iPad app collects nothing else: no location, contacts, photos, advertising identifiers, or analytics. Its low-battery warning stays on the tablet.
• Branding and support — the logo you upload for your kiosks, and the messages you send us in support tickets.
• Payment information — handled by our payment processor (Stripe). We store only your Stripe customer and subscription references and your billing status. Card numbers never reach us.
• Technical logs — IP addresses and timestamps for sign-in attempts, kiosk requests, and security events, kept for abuse prevention.

QuickBooks Online data

When you connect MetalTrack:Time to QuickBooks Online we receive OAuth tokens that let us read your employee list and company info and write time activities. Tokens are encrypted at rest and are used only to provide MetalTrack:Time. We request the accounting scope only. You can disconnect at any time from within QuickBooks or from MetalTrack:Time; on disconnect we revoke the tokens and stop accessing your company. We do not use QuickBooks data for advertising and we do not sell it.

How we use information

• To operate the time clock and sync hours to your QuickBooks company.
• To authenticate users and devices and secure accounts.
• To bill your subscription and communicate about your account, by email and, if you turn them on, by text message.
• To answer your support requests.
• To detect and prevent abuse, fraud, and security incidents.

Data retention

Raw clock-in and clock-out events are deleted about one week after their shift has synced to QuickBooks Online. A record of each synced shift (employee, start and end time, hours, and the QuickBooks time-activity reference) stays searchable in your Archive for the length your plan includes (one month, or six or twelve months with the archive add-on), then is deleted. Account and billing records are kept for the life of the account and a short period afterward, then deleted; a pre-deletion export is available on request.

Sharing

We share information only with the service providers that run MetalTrack:Time for us: Intuit (QuickBooks Online), as needed to provide the integration; Apple, only if you use Sign in with Apple; Stripe, for billing; Twilio, for text messages; Resend, for email delivery; and our infrastructure and hosting providers. We may disclose information if required by law or to protect our rights or users’ safety. We do not sell personal information.

Security

Data is transmitted over TLS and stored on a dedicated server with tenant isolation enforced at the database level. Sensitive fields (employee names, clock numbers, QuickBooks tokens, two-step verification secrets) are encrypted at rest with per-customer keys. Every kiosk is individually paired, and every request it sends is signed. Access to production systems is restricted and network-gated.

Your choices

• You can disconnect QuickBooks Online at any time.
• You can remove employees, users, and kiosks from the portal.
• From Settings you can unlink Apple or QuickBooks sign-in, remove your mobile number, and turn text alerts off. Replying STOP to any text message also stops them.
• You can request access to, correction of, or deletion of your account data by contacting us. We will respond consistent with applicable law.

Children

MetalTrack:Time is a business tool and is not directed to children under 13.

Changes

We may update this policy; material changes will be posted here with a new date and, where practical, emailed to account owners.

Contact

Spaulding Labs LLC — support@metaltrack.net