Our Commitment to Your Privacy

At LeavePlan, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our PTO tracking software. We are committed to protecting your personal information and your right to privacy.

Quick Summary

• We only collect data necessary to provide our service
• We never sell your personal information to third parties
• You own your data and can export or delete it anytime
• We use industry-standard security measures to protect your data

1. Information We Collect

Information You Provide to Us

We collect information that you voluntarily provide when using LeavePlan:

Account Information: Name, email address, password, company name, and job title
Employee Data: Names, email addresses, employee IDs, department information, and hire dates
PTO Information: Time off requests, balances, accrual rates, and approval workflows
Payment Information: Credit card details (processed securely through Stripe - we never store full card numbers)
Communication Data: Messages sent through our support channels

Information Collected Automatically

Usage Data: Pages visited, features used, time spent, and click patterns
Device Information: IP address, browser type, operating system, and device identifiers
Cookies: We use cookies to enhance your experience (see our Cookie Policy below)

2. How We Use Your Information

We use your information to provide and improve our service:

• Service Delivery: Process PTO requests, calculate accruals, send notifications, and generate reports
• Account Management: Create and maintain your account, provide customer support
• Communication: Send service updates, respond to inquiries, and share important announcements
• Analytics: Understand how users interact with our platform to improve features
• Security: Detect and prevent fraud, abuse, and security incidents
• Compliance: Meet legal obligations and enforce our terms of service
• Marketing: Send promotional emails (you can opt out anytime)

3. How We Share Your Information

We do not sell your personal information. We only share your data in these limited circumstances:

Service Providers

We work with trusted third-party companies to help us provide our service:

• AWS: Cloud hosting and data storage
• Stripe: Payment processing
• SendGrid: Email delivery
• Google Analytics: Usage analytics (anonymized)

All service providers are contractually obligated to protect your data and use it only for specified purposes.

Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if necessary to protect the rights, property, or safety of LeavePlan, our users, or others.

Business Transfers

If LeavePlan is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

4. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Strict role-based access controls and multi-factor authentication
• Monitoring: 24/7 security monitoring and automated threat detection
• Audits: Regular security audits and penetration testing
• Backups: Daily encrypted backups with 30-day retention
• Compliance: SOC 2 Type II certified

Note: No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Data Retention

We retain your personal information only as long as necessary to provide our service and comply with legal obligations:

• Active Accounts: Data is retained while your account is active
• Deleted Accounts: Personal data is deleted within 30 days of account closure
• Compliance Records: Some data may be retained longer to meet legal requirements (e.g., tax records for 7 years)
• Anonymized Data: We may retain anonymized usage data indefinitely for analytics

6. Your Privacy Rights

You have the following rights regarding your personal information:

Access

Request a copy of your personal data

Correction

Update or correct inaccurate information

Deletion

Request deletion of your data

Export

Download your data in a portable format

Opt-Out

Unsubscribe from marketing emails

Object

Object to certain data processing

To exercise any of these rights, email us at privacy@leaveplan.com or use the data export/deletion tools in your account settings.

7. Cookie Policy

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for the service to function (authentication, security)
• Analytics Cookies: Help us understand how you use our platform (Google Analytics)
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings, but disabling essential cookies may affect functionality.

8. Children's Privacy

LeavePlan is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

9. International Data Transfers

LeavePlan is based in the United States. If you access our service from outside the US, your information will be transferred to, stored, and processed in the United States. By using our service, you consent to this transfer. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a prominent notice in the application

Your continued use of LeavePlan after changes become effective constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

LeavePlan Privacy Team

Email: privacy@leaveplan.com
Mail: 123 Market Street, Suite 400, San Francisco, CA 94103
Phone: (800) 555-1234

We aim to respond to all privacy requests within 30 days.

Privacy Policy

Bank-Level Encryption

SOC 2 Compliant

Never Sell Data