Your privacy matters. This policy explains what information WageCop collects, how we use it, who we share it with, and the rights you have as a California resident. We've tried to write it in plain English. If anything here is unclear, email us at support@wagecop.com.
Contents
01 — Who we are
WageCop is operated by WageCop LLC, a California limited liability company. WageCop LLC is owned by Eugene Lee, a California-licensed attorney.
WageCop LLC is not a law firm, and WageCop is not a legal service. WageCop is a time-tracking application that helps California workers keep records of their work hours and flags potential issues under California labor law. Using WageCop does not create an attorney-client relationship between you and WageCop LLC or its owner. Information provided by WageCop is not legal advice.
For the purposes of this policy, "we," "us," and "our" refer to WageCop LLC. "You" refers to the user of the WageCop mobile application and/or the wagecop.com website. You may contact us at support@wagecop.com.
02 — Information we collect
We collect the following categories of personal information:
- Account information. Your name, email address, job title, and employer name when you create an account in the WageCop app.
- Location data. GPS coordinates, location accuracy, and timestamp at the moment of each punch event. Location is captured only when you actively record a punch. WageCop does not track your location continuously or in the background. Coordinates shown in the app and in standard exports are rounded for privacy; the paid Verified Wage Records export contains full-precision coordinates (see Section 4).
- Device information. A device build identifier used to generate cryptographic signatures for punch records. We do not collect your phone number, IMEI, advertising ID, or other sensitive device identifiers.
- Timesheet records. All punch events — including type (clock-in, clock-out, meal start/end, rest start/end, and break statuses such as interrupted or denied), local timestamp, server-witness timestamp, GPS coordinates, and SHA-256 cryptographic hash.
- Audit and void log. If a punch is voided or an alert is dismissed in the app, we retain a record of that action, the reason (where provided), and the time it occurred. Original punch records remain immutable.
- Forum content. Posts, titles, and descriptions of alleged workplace conduct you submit to employer forums, along with any subsequent edits, deletions, or reports of other users' posts. Your identity is retained in our systems even when you choose to post anonymously.
- Punch notes and dismissal reasons. Any text you choose to attach to a punch event (for example, the reason a meal break was interrupted) or to an alert dismissal. Punch notes are stored with the underlying punch record and are subject to the same immutability protections.
- Usage settings. Your workweek start day, daily cutoff hour, default hourly rate, and language preference (English or Spanish).
- Website information. If you visit wagecop.com, we may collect standard log data such as IP address, browser type, referring page, and pages viewed. See Section 6 for details.
03 — How we use your information
We use the information we collect for these purposes:
- To provide timekeeping and alert-detection services;
- To generate tamper-evident timesheet records that you may choose to use as evidence in a wage and hour claim;
- To calculate overtime, double overtime, and split-shift premiums;
- To operate the in-app community forum;
- To contact you regarding your account;
- To improve the app and the accuracy of its alert detection.
Your records belong to you. You can export them at any time and share them with anyone you choose — including a licensed attorney, the California Labor Commissioner, or your employer. WageCop LLC does not share your records with any specific law firm or third party on your behalf.
04 — Location data
WageCop requests access to your device's location only when you record a punch. We do not access your location at any other time. Location data is used solely to create a verifiable record of where you were when you clocked in, out, or took a break — which may be used as evidence in employment disputes.
Your choice. You can deny location access, but punches recorded without GPS coordinates will carry reduced evidentiary weight. You can revoke location permissions at any time through your device settings.
Precise location in the Verified export. Locations shown in the App and in standard exports are rounded to protect your privacy. The paid Verified Wage Records export is different: its verification appendix contains your exact, full-precision GPS coordinates for each punch, because precise coordinates are part of what makes each record independently verifiable. This export is generated only when you choose to create it; it is your own data to keep and share, and you should be aware that any copy you generate or share contains your precise location at the time of each punch. Share it only with people you intend to (for example, your attorney).
05 — Sensitive Personal Information disclosure
Under the California Privacy Rights Act (CPRA), the precise GPS coordinates we capture at each punch event are categorized as "Sensitive Personal Information." We collect and use this information for one purpose only: to create a verifiable, time-stamped record of where you were when you recorded a work-related punch event. We do not use Sensitive Personal Information to infer characteristics about you, to build a profile, for advertising, or for any purpose other than the timekeeping and evidence-preservation purposes you authorized by granting location permission.
Because our use of Sensitive Personal Information falls within the purposes permitted under California Civil Code § 1798.121(d) and its implementing regulations, the separate "right to limit use of Sensitive Personal Information" does not apply. You retain the right to revoke location permissions at any time through your device settings, in which case punches recorded thereafter will not include GPS coordinates. The Verified Wage Records export you may choose to generate includes your full-precision GPS coordinates for this same verification and evidence-preservation purpose; it is generated only at your request.
06 — Cookies, analytics, and embedded content
We do not use cookies for advertising or tracking, and we do not use third-party advertising or analytics services to profile you. We do not allow ad networks to track you across websites via this Site. We may keep standard server logs (such as IP address, browser type, and pages viewed) on our own systems to keep the Site running and secure; we do not use this information to build an advertising profile.
To help you learn how to use WageCop, some pages on wagecop.com may embed instructional videos hosted by third-party providers such as YouTube (operated by Google) or Vimeo. When a page containing an embedded video loads, or when you play the video, your browser connects directly to that provider, and the provider may receive your IP address and device or browser information and may set its own cookies. That information is collected by the provider and is governed by the provider's own privacy policy, not by this Privacy Policy; we do not control, and are not responsible for, the cookies or data practices of these providers. Where available, we use privacy-enhanced embedding (for example, YouTube's no-cookie mode) so that advertising cookies are not set unless you play the video. We do not share your account information, punch records, location data, or alerts with these video providers, and we do not use embedded video to advertise to you.
This Site does not control, and is not responsible for, cookies that other companies may place in your browser, including through embedded video or through websites other than wagecop.com. You can view and control cookies through your browser settings, and you can avoid third-party video cookies by not playing embedded videos.
07 — Data storage & security
Your data is stored on servers hosted by Supabase running on Amazon Web Services (AWS) infrastructure in the United States. WageCop is designed to operate offline: punches are captured and locally cryptographically sealed on your device at the moment you tap, then synchronized to our servers when network connectivity is available. We implement industry-standard security measures, including:
- Encrypted data transmission (TLS/SSL);
- Row-level security policies restricting data access at the database layer;
- SHA-256 cryptographic hashing of punch records, including a server-witnessed timestamp recorded at the moment a punch is received by our servers;
- Authenticated access controls;
- An immutable record of original punches and a separate audit log of any voids, dismissals, or corrections.
Server storage and restoring your records. Your sealed wage-record snapshots are also stored on our servers. This lets you restore your evidentiary history — each week as it existed at the moment it was sealed — to a new device if you reinstall the App or change phones. Restored records reflect their sealed, point-in-time state.
No security system is impenetrable. In the event of a data breach affecting your personal information, we will notify you as required by California Civil Code §§ 1798.29 and 1798.82.
08 — Data sharing
We do not sell your personal information. We do not share it with any law firm or third party on your behalf. Your records are yours to export and share as you choose. WageCop LLC shares data only in these limited circumstances:
- With service providers (such as Supabase/AWS) that process data on our behalf under written confidentiality obligations;
- As required by law, court order, or valid legal process;
- To protect the rights, property, or safety of WageCop LLC, our users, or the public.
Forum posts are visible to other WageCop users who work for the same employer. Anonymous posts do not display your name publicly, but your identity is retained in our systems for moderation purposes.
Advertisers. WageCop LLC may display paid advertising in the App or on the Site from third parties, such as law firms or service providers. We do not share your account information, punch records, location data, alerts, or any other personal data with advertisers. Advertisers pay for visibility; they do not receive information about you, and they do not have access to the contents of your account. If you choose to contact an advertiser, you do so on your own initiative and any information you share with that advertiser is governed by the advertiser's own terms and privacy practices.
Embedded video. Some pages may include instructional videos hosted by third-party providers such as YouTube or Vimeo. When you load or play an embedded video, your browser sends technical information (such as your IP address) directly to that provider, where it is governed by the provider's own privacy policy. This is not a sale of your personal information, and we do not share your account information, punch records, location data, or alerts with these providers. See Section 6.
09 — Your California privacy rights
As a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to know. What personal information we collect and how it is used.
- Right to delete. Your personal information, subject to the retention rules in Section 10 (including permanently retained financial records and limited forum-moderation data) and to any legal hold for an active or reasonably anticipated claim.
- Right to correct. Inaccurate personal information.
- Right to opt out of sale or sharing. We do not sell, and do not share for cross-context behavioral advertising (as those terms are defined under the CCPA/CPRA), your personal information, but you may still exercise this right.
- Right to non-discrimination. We will not discriminate against you for exercising your privacy rights.
To exercise any of these rights, contact WageCop LLC at support@wagecop.com.
Identity verification. Before processing a request, WageCop LLC will verify your identity by requiring you to confirm information associated with your account (such as the email address used to register, the approximate date of account creation, and recent punch activity). For deletion requests, we may require additional verification steps. We may decline to process requests we cannot reasonably verify.
Response timing. We respond to verified requests within forty-five (45) days. When reasonably necessary — including for complex requests or requests requiring data retrieval across multiple systems — we may extend this period by an additional forty-five (45) days, with notice to you. Time required for identity verification is not counted toward the response period.
Authorized agents. You may designate an authorized agent to make a request on your behalf. We will require both written proof of the agent's authorization and direct verification of your identity before processing.
10 — Data retention
Wage data. We currently retain your timesheet records, punch data, sealed wage-record snapshots, and alert data for a period of up to eight (8) years from the date of each record — a period chosen to cover the applicable California statutes of limitations for wage-and-hour claims (which generally run three to four years) with a margin for the time it can take to bring and resolve a claim. We may change this retention period from time to time (including shortening it), and will update this policy to reflect the period then in effect. After the retention period, these records are permanently deleted. You may request deletion of your account and this wage data sooner, as described in Section 9 and below, subject to any legal hold for an active or reasonably anticipated claim.
Financial records. Records of your purchases and of each Verified Wage Records export you generate are financial records. We retain these for as long as required for tax, accounting, and dispute-resolution purposes, including after you delete your account. Financial records are kept separate from, and are not deleted with, your wage data.
Account deletion — what is deleted and what is kept. When you delete your account:
- your wage data — punches, sealed snapshots, location data, alerts, punch notes, profile, and usage settings — is deleted;
- your financial records (purchases and export-generation records) are retained, as described above;
- your forum content remains visible to preserve the integrity of community discussions, but your displayed username is replaced with "[deleted]"; we retain your identity internally, in a restricted form, only as needed for moderation, safety, and enforcement of our posting rules and any ban.
Nothing in this Section requires us to delete information we are required to retain by law, or that we must keep to resolve disputes, prevent fraud or abuse, or enforce our agreements.
11 — Children's privacy
WageCop is intended for adults aged 18 and older who are employed in the State of California. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact us immediately at support@wagecop.com and we will delete the account.
12 — Changes to this policy
WageCop LLC reserves the right to modify this Privacy Policy at any time in its sole discretion, effective upon posting an updated version through the Site, the App, or both. The "Last updated" date at the top of this page reflects the date of the most recent modification. We may, but are not required to, separately notify you of changes; it is your responsibility to review this Privacy Policy periodically. Your continued use of WageCop or wagecop.com after the "Last updated" date constitutes your acceptance of the updated policy.
13 — Contact us
Questions about your privacy?
For privacy-related questions or to exercise your rights under California law, contact WageCop LLC:
WageCop LLC California, USA support@wagecop.com