Privacy policy
How Werktyd handles personal information of business users and website visitors. Worker biometric data is covered separately in the workplace notice.
What we collect
Account details you give us (name, business email, company information) and basic technical logs needed to run and secure the service.
Why
To provide the time-and-attendance service, bill it, secure it, and support you. We do not sell your data.
Cookies
A single session cookie keeps you signed in. No third-party advertising cookies.
Security
Encryption in transit, access control and audit logging. The identifying worker fields — SA ID number, phone number and pay — are AES-256-GCM encrypted at rest. The numeric face templates are not encrypted at rest: a template has to stay a plain numeric array for the face comparison to work at all, so it is protected instead by access control, role separation and audit logging on a single-purpose database. Worker names and worker numbers, and your own account fields such as your name and the email address you sign in with, are likewise stored unencrypted and protected by access control and audit logging.
Where your information is processed, and who else sees it
The service is hosted in Germany (EU). To run it we use a small number of third parties, some of which process information outside South Africa:
- Paystack — payments. Your email address is sent to them when a subscription is started or renewed. Card details are entered on their pages and never reach Werktyd.
- Telegram — the messaging channel for owners and workers. For website contact submissions, we send support a link to our restricted inbox; the notification excludes your message and contact details.
- OpenStreetMap — map tiles are fetched by your browser when you open the sites or patrol maps in the dashboard. No worker is identified to them; the request carries the map area you are viewing.
- Optional AI language and transcription services. When optional owner chat assistance is enabled, commands requiring AI interpretation are sent through OpenRouter to its configured language-model providers; the default chain includes Google Gemini, Anthropic Claude and DeepSeek. For voice notes, Groq receives the voice-note audio for transcription, and the transcript may then be sent through the same language-model chain. These requests may include worker names, numbers or other personal information the owner includes. They do not append the stored worker roster, face templates or clock photographs.
The third parties involved in worker biometric data are listed separately in the workplace notice, and the full sub-operator terms are in the operator agreement you accepted at sign-up.
Your rights
You may access, correct or delete your account data — email privacy@werktyd.co.za. You may complain to the Information Regulator (South Africa).
Last updated 6 September 2026.