Privacy Policy

Last updated November 8, 2026

vynTral ("we", "us") makes the VYNTRAL CLOCK BOX and Elliot, a time-tracking and field console for construction crews, available at vyntralsystems.com. This policy explains what information we collect, how we use it, and the choices you have.

Information we collect

• Account information. Your name, email address and company name. If you sign in with Google, we receive your name, email address and Google account ID from Google; we do not receive your Google password. If you sign up with an email and password, we store only a secure hash of the password.
• Workspace information your company enters. Crew member names, roles, fob (badge) IDs, cost codes, jobsite details, safety tickets, clock-in and clock-out times, timesheets, daily logs and notes.
• Clock box and device data. Fob taps (the fob's ID, the time and the clock box that read it), and the box's network details needed to deliver them.
• Voice commands. When the foreman uses Elliot's voice features, the transcribed text of the command, used to carry it out and kept in the workspace's audit log.
• Pilot and support requests. What you submit in our forms: company, contact name, phone, email, jobsite location, crew size and message.
• Technical information. Basic server logs (such as IP address, browser type and the time of a request) used for security and reliability, and a session cookie that keeps you signed in.

How we use information

• To provide the service: record attendance, build timesheets and daily logs, and run Elliot for your company.
• To sign you in and keep your company's workspace separate from every other company's.
• To respond to pilot and support requests and to contact you about your account.
• To keep the service secure, prevent abuse and fix problems.

We do not sell personal information, and we do not use it for advertising.

How information is shared

• Within your company. Your company's owners and foremen can see your company's workspace. No other company can.
• Integrations you turn on. If your company connects Procore, the hours and records it chooses to sync are sent to Procore.
• Service providers that run the service for us under their own security commitments: Railway (hosting), Cloudflare (domain and DNS), Google (sign-in, and, if enabled, the AI that interprets voice commands).
• When the law requires it, or to protect the safety and rights of our users and the public.

Google user data

When you choose "Continue with Google", we request only your basic profile and email address, and use them solely to create and sign in to your vynTral account. vynTral's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not access your Gmail, contacts, files or any other Google data.

Retention and deletion

We keep account and workspace information while your company uses vynTral, and as long as needed for payroll, legal and record-keeping obligations. Your company's owner can ask us to delete the workspace, and you can ask us to delete your own account, through our support page.

Security

Data is sent over encrypted HTTPS connections. Session cookies are encrypted and HTTP-only, passwords are hashed, and each clock box authenticates with its own token. No system is perfectly secure, but we work to protect your information.

Children

vynTral is a workplace service and is not directed to children under 16.

Changes

We may update this policy. We will change the date above when we do, and tell account owners about significant changes.

Contact

Questions about privacy? Reach us through the vynTral support page.