Privacy Policy
This policy explains how Evangeline Labs, LLC ("Evangeline Labs," "we," "us") collects, uses, shares and protects information through this website and through CollaBOARate, our team, scheduling and time-clock app for businesses (the web app at collaboarate.com and our mobile apps). CollaBOARate is provided to businesses ("Customers," usually your employer) for use by their employees and other authorized people ("Users").
1. Who is responsible for your information
Your employer controls your work data. When your employer uses CollaBOARate, your employer decides who gets an account, what features are on (for example, location checks at clock-in), what is entered and how long work records are kept. We process that information on your employer's behalf and under our agreement with them, as their service provider (sometimes called a "processor"). If you use CollaBOARate through your employer, you can send privacy requests to your employer or to us. If you write to us, we will help your employer respond.
We control the limited information we collect for our own purposes, such as the contact details of business customers and messages people send us through this website.
2. Information CollaBOARate collects
Account and profile
- Name, work email address, role and permissions (for example admin or manager), and the groups, stores or locations you belong to.
- Your password, which is handled by our sign-in provider. We never see it. If you choose to sign in with Google, Microsoft, Facebook or Apple, that company shares your name and email address with the app.
- Details your employer adds: job title, department, employee number, hire, service and end dates, pay type, standard hours and time-off policy.
- Optional details you or your employer add: phone number, birthday, short bio, profile and cover photos, and an emergency contact (only you and admins can see the emergency contact).
Things you create or share at work
- Posts, comments, reactions, photos and files in groups, and posts on your own profile.
- Direct and group messages, with their attachments and reactions, and whether a message or post has been seen. Direct messages and group chats can be read only by the people in them.
- Tasks, checklists, forms and reports (answers, photos, signatures and the PDFs made from them), acknowledgments of required reading, and which manuals you have read.
Work, time and pay records
- Schedules and shift requests, clock-in and clock-out times, breaks and lunches, timesheets and their approvals, and requests to fix a punch.
- Time-off requests and balances, including a doctor's note if your employer's policy asks for one.
- Mileage (miles, odometer readings, purpose and an optional photo) and expense receipts (amount, vendor and photo).
- Work documents an admin uploads for you, such as licenses or certifications with expiry dates. Only you and admins can see them.
- A kiosk PIN if your employer uses a shared clock-in device. We store it only in scrambled (hashed) form.
- An activity log of changes to time, pay and HR records, showing who changed what and when.
Location
CollaBOARate uses your device's location only for timekeeping features your employer turns on:
- When you clock in or out, or start or end a break, the app records your GPS position and its accuracy. It also records the nearest scheduled store and your distance from it, and looks up the street address for that position. This is how the app confirms you are at the right place.
- While you are clocked in, the app records your position about every two minutes while it is open. Depending on your device and browser, it may also do this while the app is in the background. Your employer uses this for the live team map, to confirm store visits and, if your employer turns it on, to clock you out automatically when you leave the store. Recording stops when you clock out.
- When you start or finish a form or report that asks for it, the app records your position to show where it was done.
- If a clock-in attempt fails, the app records the position and basic device details so the problem can be fixed.
We do not collect your location when you are not clocked in, except for a form you choose to fill in. You can turn off location access in your device settings at any time. If you do, your employer may require you to clock in another way, for example on a shared kiosk.
Device and usage information
- Device type, operating system and browser, whether the app is installed on your home screen, and whether you are online when you punch.
- Your notification setting and, if you allow notifications, a push token that lets us send notifications to that device.
- IP addresses and technical logs kept by our hosting providers, and basic usage events (such as sessions and page views) that our app platform records to run the service.
Messages we send
We send sign-in codes, invitations, password resets, and work notifications or reminders by email or push notification. If your employer turns on text-message reminders, we use your phone number to send them. You can reply STOP to stop texts.
3. How we use information
- To provide CollaBOARate to your employer and to you: accounts, groups and messages, scheduling, time clock, timesheets, time off, mileage, forms and notifications.
- To confirm where and when work happened, as your employer configures it, and to prepare records your employer uses for payroll.
- To keep the service secure, prevent misuse and keep an audit trail.
- To provide support, fix problems and improve reliability.
- To comply with the law and enforce our agreements.
We do not sell personal information. We do not share it for targeted ("cross-context behavioral") advertising. We do not show ads, and we do not use advertising or tracking tools in CollaBOARate or on this website. We do not use your content to train artificial-intelligence models.
4. Who we share information with
- Your organization. Your employer's admins and managers can see the work records and content their settings allow. Coworkers can see what you share in groups and chats with them.
- Service providers who run parts of the service for us, under contract, and only to provide it:
- Base44, our application platform. It hosts the app, its database and file storage, handles sign-in, and delivers our emails.
- Cloudflare, which hosts this website and forwards email sent to our domain.
- OpenStreetMap's Nominatim service, which turns punch coordinates into street addresses. Map images in the app are loaded from OpenStreetMap, which sees your device's IP address. When an admin searches for a store address, the search text goes to Photon (by Komoot) and Esri ArcGIS.
- Apple, Google, Microsoft and Mozilla push services, which deliver notifications to your device.
- Twilio, only if your employer turns on text-message reminders. Twilio receives the phone number and the message.
- Companies you choose to use. If you sign in with Google, Microsoft, Facebook or Apple, or tap "Open in Maps" (which opens Google Maps), their own privacy policies apply.
- Legal reasons. We share information when the law requires it, or to protect the rights, safety and security of people and of the service.
- Business transfers. If Evangeline Labs is involved in a merger, acquisition or sale of assets, this policy will continue to protect the information.
5. How long we keep information
We keep Customer data while the Customer's account is active. Your employer decides how long work records are kept. Employers are often required by law to keep time and pay records for several years. When a Customer's subscription ends, we delete or return its data within a reasonable period, unless the law requires us to keep it longer.
We keep daily backups for 30 days and monthly backups for longer, so that data can be recovered after a failure. Deleted information may stay in a backup until that backup expires. We restore backups only to recover from a failure or error.
6. Deleting your account
In the app: open Profile, scroll to the bottom and tap Delete my account. The app lists what will be removed and what your employer keeps. To confirm, type DELETE. Admins can also delete their own account from Settings.
What is removed right away:
- Your login. You are signed out and can no longer sign in.
- Your profile photo, cover photo, bio, personal phone number, birthday and emergency contact.
- Your notification devices, kiosk PIN, saved posts, your notifications and your group memberships. You are also removed from group chats.
- The location trail recorded while you were clocked in.
- Posts on your own profile.
What your employer keeps:
- Work records: time punches (including where you clocked in and out), breaks, timesheets, time off and balances, mileage, receipts, schedules, work documents and the activity log.
- Your name, work email, employee number, job title and job dates, so those records remain accurate.
- Posts, comments and messages you already shared with coworkers. They stay in those conversations.
We keep these because employers may be legally required to keep payroll and time records, and because the records belong to your employer. To ask for any of them to be deleted as well, contact your employer, or write to us and we will work with your employer.
The last admin of a company can't delete their own account until another person is made an admin, so the company is never locked out. The login that owns the company's app setup is closed through support.
By email: if you can't sign in, or you would like us to handle the request, email francesco@evangelinelabs.com from the address on your account, with the subject "Delete my account." We will confirm the request with you and let your employer know, then complete it promptly.
7. Security
We protect information with encrypted connections (HTTPS), role-based permissions, private groups and chats that only their members can read, an audit trail of changes to time and pay records, and regular backups. No system is completely secure. If we learn of a breach that affects your information, we will notify your employer and, where the law requires, you.
8. Children
CollaBOARate is a workplace tool for people old enough to work. It is not directed to children, and we do not knowingly collect personal information from children under 13. If you believe a child's information was entered, contact us and we will delete it.
9. Your choices and rights
- You can view and update much of your profile in the app, and turn off location or notifications in your device settings.
- Depending on where you live, you may have the right to access, correct, delete or get a copy of your personal information, and to appeal our decision on a request. For work data, contact your employer or us. We will respond within the time the law requires. We will not treat you differently for using these rights.
10. This website
This website uses no advertising or analytics cookies and no third-party trackers. Our host, Cloudflare, processes visitors' IP addresses and may set cookies that are strictly needed for security. If you email us, we use your message only to reply to you.
11. Where information is processed
We are based in the United States. Our providers process information in the United States and other countries, under safeguards required by law.
12. Changes to this policy
We will post any changes on this page and update the effective date. We will tell Customers about significant changes before they take effect.
13. Contact us
Evangeline Labs, LLC
704 Mechanical Dr
Slidell, LA 70460, USA
francesco@evangelinelabs.com