Privacy Policy

1. Information We Collect

We collect information in several categories depending on how you interact with AdaptDay:

Account Data

When you register for AdaptDay, we collect your name, email address, organization name, and authentication credentials. This data is necessary to create and maintain your account.

Employee Personally Identifiable Information (PII)

As a workforce management platform, AdaptDay stores sensitive employee data on behalf of your organization. This may include full legal names, dates of birth, Social Security numbers or government-issued identifiers, home addresses, phone numbers, emergency contacts, employment history, compensation details, benefits enrollment information, I-9 documentation, and certifications. You, as the employer, are the data controller for your employees' PII. Adaptensor, Inc. acts as the data processor, handling this information solely to provide the AdaptDay service.

Usage Data

We automatically collect information about how you interact with AdaptDay, including pages visited, features used, browser type, device information, IP address, and timestamps. This data helps us improve the platform and diagnose technical issues.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the AdaptDay platform
• Authenticate users and manage access control through role-based permissions
• Process employee lifecycle events such as onboarding, time-off requests, and offboarding
• Generate analytics, reports, and compliance documentation
• Send transactional emails including account notifications, approval requests, and system alerts
• Enforce audit logging for compliance and security purposes
• Respond to support requests and communicate about service updates

3. Data Sharing & Third Parties

We do not sell your personal information. We share data with third-party service providers only as necessary to operate AdaptDay:

• Clerk — Authentication and session management. Clerk processes login credentials, multi-factor authentication data, and session tokens.
• Neon — PostgreSQL database hosting. All structured application data, including employee records, is stored in Neon-managed databases with encryption at rest.
• Vercel — Application hosting and edge delivery. Vercel processes HTTP requests, serves the application, and provides infrastructure-level logging.
• Resend — Transactional email delivery. Resend processes email addresses and message content for notifications, approval workflows, and system alerts.

Each provider operates under their own privacy policy and data processing agreements. We select providers that maintain industry-standard security certifications.

4. Cookies & Tracking

AdaptDay uses essential cookies for authentication and session management. We may use analytics tools to understand platform usage patterns. We do not use advertising cookies or cross-site tracking pixels. You can configure your browser to block cookies, though this may affect platform functionality.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the service. Employee PII is retained according to your organization's configured retention policies. Audit logs are retained indefinitely as they form part of the compliance record and are append-only by design. When you terminate your account, we will delete or anonymize your data within 90 days, except where retention is required by law or legitimate business need.

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate or incomplete data
• Deletion — Request deletion of your personal data, subject to legal retention requirements
• Portability — Request your data in a structured, machine-readable format

To exercise any of these rights, contact us at jamie@adaptensor.com. We will respond within 30 days.

7. Children's Privacy

AdaptDay is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.

8. International Data

AdaptDay is hosted on infrastructure located in the United States. If you access AdaptDay from outside the United States, your information will be transferred to, stored, and processed in the United States. By using AdaptDay, you consent to this transfer. We implement appropriate safeguards, including encryption in transit and at rest, to protect data during international transfers.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a prominent notice within the platform. Your continued use of AdaptDay after such changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: