HourLoop legal and trust
Privacy policy
Effective 15 July 2026. This policy explains the data HourLoop processes during early-access pilots and account use.
Data we process
Account identity, organisation membership, shift preferences, work intentions, tasks, shared blockers, support actions, reviews, technical logs, and product preferences needed to provide the service.
Private and shared data
Employee-private reflections and personal-use workspaces are not intended for employer visibility unless the employee explicitly shares them. Shared outcomes, blockers, and agreed workload signals may be visible to authorised managers.
Purpose and access
Data is used to authenticate users, operate role-specific workspaces, persist execution records, support users, protect the service, and improve early-access functionality. Access is scoped by role and organisation.
Retention and rights
Pilot retention requirements are agreed with organisations while automated custom-retention controls remain on the roadmap. Contact privacy@hourloop.co.za to request access, correction, or deletion subject to legal and contractual obligations.
Processors and transfers
HourLoop may use hosting, database, analytics, and email providers. Production configuration should limit each provider to the data required for its function.