Draft under legal review (draft-2026-10-23b).
Privacy Policy
Who this covers
Sepify is software that restaurants use to run their time clock. Each restaurant is the employer and decides why its staff's information is collected; Sepify processes that information on the restaurant's behalf as its service provider. This policy also covers the owners and managers who sign in to Sepify.
What we collect
- Owner and manager accounts: name, email, password (stored hashed) and sign-in records.
- Restaurant details: business name, location names and addresses.
- Employee records entered by the restaurant: name, 4-digit PIN, hourly wage (for the payroll export), punches (time, location, tablet) and manager notes and edits.
- Tablet information needed to keep time clocks working (device health and error reports).
- Face verification, only if the restaurant turns it on and the employee agrees: a numeric face template used to confirm it's really that employee punching in. Employees can always use a PIN-only option instead. Templates are never sold, never shared and never used to train models.
How we use it
Only to provide the Service: recording punches, showing timesheets, producing payroll exports, keeping tablets running, securing accounts and contacting owners about their account. We don't sell personal information and we don't use it for advertising.
Where it's stored
Our database is hosted in the United States (Ohio). Information may therefore be processed outside Canada and be subject to the laws of the United States. We use these service providers: Supabase (database and sign-in), Vercel (hosting), Resend (email), Cloudflare (security checks), Stripe (billing, when you add a payment method) and Twilio (text messages, if used).
How long we keep it
While the restaurant uses Sepify. When a restaurant cancels, it can export its data first, and we then delete it. Face templates are deleted when consent is withdrawn and soon after an employee is deactivated. Payroll records may be kept longer where employment law requires the restaurant to keep them.
Your choices
Employees: ask your employer to see, correct or delete your information, or to switch to PIN-only punching; we help them do it. Owners and managers: you can update or delete your account by contacting us.
Security
Information is encrypted in transit, each restaurant can only see its own data, and face templates are encrypted at rest. If a breach affects your information, we'll notify the restaurant and, where required, the authorities.
Contact
Privacy questions or requests: privacy@sepify.com