Privacy policy
Last updated 16 October 2026
The short version. Your employer decides what Werksign records about your working time. We keep it in the EU, use it only to run the service, never sell it, and never read your location outside the moment you clock in.
Who we are
Werksign is run by Adhocplus Data Ltd, a company registered in Nigeria. For anything about this policy or your data, write to privacy@werksign.com.
Your employer is in charge of your time records
When a company uses Werksign, the records it keeps about its staff belong to that company. Under data protection law the company is the controller and Werksign is its processor: we handle the records on its instructions. If you work for a company that uses Werksign, ask your employer first; we help them answer. For company accounts, billing, support and this website, Werksign is the controller.
What we collect
- Your account: name, work email, the codes we send you to sign in, and your sessions.
- Time records: clock-ins and clock-outs, breaks, notes, sites, fixes and time off, and the history of every change to them.
- Presence checks, only if your company turns them on: your location at the moment you clock in or out (never in the background), the network address the request came from, and a key that identifies a browser you enrolled. We do not collect MAC addresses or biometrics.
- Billing: company details and invoices.
- Technical logs: kept short-term for security and reliability, without names or locations.
Why we use it
- To provide Werksign to the company that signed up (performance of a contract).
- Many employers must record working time by law; that obligation is theirs, and it is their basis for the core record. Presence checks need their own justification, so they stay off until a company enables them.
- To keep the service secure and prevent abuse (legitimate interests).
- To bill and keep accounts (legal obligation).
- To send customers product news they can opt out of in every message (legitimate interests).
Anything else only with your consent. We do not sell data and we do not run advertising trackers.
Where it is kept and who helps us
Werksign data is stored in the European Union: the database runs on Neon in Frankfurt, and the app runs on Cloudflare. We also use an email provider to send sign-in codes and notifications, and a payment provider for billing. Our team may administer systems from outside the EEA; such transfers are covered by Standard Contractual Clauses and encryption. A full list of subprocessors is available on request.
How long we keep it
| What | Kept for |
|---|---|
| Time records and their totals | 3 years after the period ends, or longer where a company's law requires it |
| Exact location from a clock-in | 90 days, then reduced to inside or outside the site and a distance |
| Network addresses | 90 days, then shortened |
| History of changes | As long as the records it describes, plus one year |
| A company's data after it cancels | 30 days to change its mind, then deleted; backups rotate out shortly after |
Your rights
You can ask to see, correct, delete or move your data, to restrict or object to how it is used, and to withdraw consent. Anyone can download their own records from Werksign (Reports, Your data), and ask for a fix to a record through their manager. We reply within one month. You can also complain to a data protection authority: in the EEA the one where you live or work, in the UK the ICO, and in Nigeria the Nigeria Data Protection Commission.
Staff under 18
Werksign is a workplace tool. A company that adds staff under 18 is responsible for doing so lawfully.
Changes
We post changes on this page and email account owners about material ones before they take effect.