This Privacy Policy explains how Orcus Technologies — which does business as TimeForge, SurveyConnect, and LineUp (“we,” “us,” or “our”) — collects, uses, and shares personal information. It covers our websites, products, and services, and the people we interact with: website visitors, prospective and current customers, and the workforce members who use our products.
It works alongside our Cookie Policy, which describes the cookies and analytics on our websites in detail.
The short version
- We build workforce management and related software. Most personal information in our products is employee/workforce data that our business customers put there so we can run the service for them — that data belongs to the employer, not us.
- We also collect ordinary business information about website visitors, prospects, and account holders (things like names, emails, and usage data).
- We use information to provide, secure, and improve our products and to communicate with customers.
- When you consent to advertising cookies, our marketing website discloses online identifiers — cookie IDs, device identifiers, and IP address — to third parties, including Meta and LinkedIn, so they can measure our campaigns and show you TimeForge ads. Under California, Texas, and other state privacy laws this is defined as a ‘sale,’ as ‘sharing for cross-context behavioral advertising,’ or as ‘targeted advertising.’ We do not sell or share the workforce data we process on behalf of our customers; that data is never disclosed to third parties for advertising.
- Some customers use fingerprint time clocks. Where they do, we store only a non-reversible template — never the actual fingerprint.
The rest of this policy fills in the details.
1. Two roles: who controls the data
How we handle personal information depends on whose data it is.
- When we act as a business (a “controller”). For our websites, marketing, sales, and customer accounts, we decide how personal information is used. This policy governs that information directly.
- When we act on behalf of a customer (a “service provider” or “processor”). When an employer uses our products, they load in information about their workforce — schedules, time records, contact details, and similar. That employer controls that data; we only process it to provide the service under our agreement with them. If you are an employee using our products through your employer and you want to access, correct, or delete your information, please contact your employer. We will support them in responding to your request.
2. Information we collect
- a. Information you give us. Account and contact details (name, business email, phone, company), billing information, support requests, survey responses (including through SurveyConnect), and anything you send us directly.
- b. Information we collect automatically on our websites. Device and usage data, log information, and cookie/analytics data. Our analytics come from a third-party service and are anonymized — IP addresses are not stored, and the data is not linked to advertising identifiers. See our Cookie Policy for the specific provider and cookies.
- c. Information from integrations. With a customer’s authorization, our products connect to third-party systems such as point-of-sale (POS), HR, and payroll platforms. We receive only the data needed to provide the connected feature (for example, sales data for labor forecasting or employee records for payroll), at the customer’s direction.
- d. Workforce data we process for our customers. Our customers decide what workforce information to manage in our products, and we treat all of it the same way: as the employer’s confidential data, stored and processed only to provide the service and under the employer’s control. It can range from everyday records such as contact details, schedules, hours worked, and pay rates to sensitive information an employer chooses to collect through our forms — for example, tax or employment-eligibility records. We don’t use this information for our own purposes, and we don’t treat it differently based on its type. The one exception is biometric data, which is handled as described in Section 3.
3. Biometric data (fingerprint time clocks)
Some customers use TimeForge time clocks that verify employees by fingerprint. Where an employer enables this feature:
- What we collect. When an employee enrolls, the time clock scans a fingerprint and immediately converts it into a non-reversible mathematical template (a hash derived from the fingerprint’s unique features). We do not store the fingerprint image, and the template cannot be reverse-engineered back into a fingerprint. The template is used only to confirm the employee’s identity when they clock in or out. We treat this template as biometric data subject to applicable law, including BIPA — storing only a non-reversible template is a security measure, not a basis for exemption.
- Our role and consent. This data is collected at the direction of the employer. The employer is responsible for providing any legally required notice to employees and obtaining their written consent before enrollment — for example, under the Illinois Biometric Information Privacy Act (BIPA) and similar state laws. We process and store the template on the employer’s behalf.
- No sale. We do not sell, lease, trade, or otherwise profit from biometric data.
- Retention and destruction. We keep the biometric template only as long as needed to provide time-and-attendance services. We destroy it when the purpose for collection is satisfied, when the employer’s account ends, or within the period required by law — under BIPA, when the initial purpose is satisfied or within three years of the individual’s last interaction with us, whichever comes first.
- Security. Biometric templates are protected with reasonable safeguards, at the same or greater level than we apply to other sensitive information.
4. How we use information
We use personal information to:
- provide, operate, secure, and maintain our products;
- set up and manage accounts and process billing;
- provide customer support and respond to requests;
- improve and develop our products, including through anonymized analytics;
- communicate with customers about their accounts, service updates, and (where appropriate) relevant offerings;
- detect, prevent, and address fraud, abuse, and security issues; and
- comply with legal obligations.
We send marketing or transactional emails based on a person’s relationship with us or settings in a customer’s account — not based on website cookies, and not by matching anonymous visitors to outside data.
5. How we share information
We share personal information only as needed to run our business and provide our products:
- Service providers that host, support, and help operate our products, subject to terms that limit how they may use the data.
- Integrations you authorize — POS, HR, payroll, and similar systems — at the customer’s direction.
- Legal and safety reasons — to comply with law, enforce our agreements, or protect rights, property, and safety.
- Business transfers — in connection with a merger, acquisition, or sale of assets, with notice as required by law.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
Payments, earned wage access, and payroll
Some offerings — including earned wage access and payroll — are provided through third-party partners that you or your employer connect to or engage for those services. To enable them, we share the employment data the partner needs to calculate and process payments, such as hours worked, attendance, and pay rates. We do not collect or store bank account or other financial-account details for these services — the partner collects and processes that financial information directly, under its own privacy policy and applicable financial regulations.
6. Cookies and analytics
Our websites use cookies for necessary functions, functional preferences, and anonymized analytics. We use advertising and retargeting cookies on our website. They are off by default and load only if you accept the Advertising category in our cookie banner. Our Cookie Policy lists each one. Full details — including cookie names, purposes, and durations — are in our Cookie Policy.
7. Data retention
We keep personal information for as long as needed to provide our products, maintain accounts, meet legal and contractual obligations, resolve disputes, and enforce our agreements. Workforce data is retained according to our agreement with the customer; when an account ends, we delete or return it as agreed. Biometric data follows the schedule in Section 3.
8. Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No system is perfectly secure, but we work to protect data in storage and in transit and to limit access to those who need it.
9. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of the sale or sharing of it. See Your Advertising Choices below. To exercise these rights for information we control, contact us using Section 12. We will not discriminate against you for exercising your rights, and you may use an authorized agent where the law allows.
Employees: if your information is in TimeForge because of your employer, please direct requests to your employer, who controls that data. We will assist them as needed.
For users in the EU, UK, and Switzerland
Where we process the personal information of individuals in the EU, UK, or Switzerland:
- Roles. For workforce data in our products, the employer is the data controller and we act as a processor on their behalf. For our websites and customer accounts, we are the controller.
- Legal bases. We rely on: performance of our contract (to provide the service), our legitimate interests (to operate, secure, and improve our products), compliance with legal obligations, and consent where required (such as certain cookies and analytics).
- International transfers. We are based in the United States, so personal information may be transferred to and processed there. Where required, we use appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.
- Your rights. Subject to applicable law, you may access, correct, delete, restrict, or object to the processing of your personal information, and request portability. You may withdraw consent at any time and lodge a complaint with your local data protection authority. If your information is in our products through your employer, please contact your employer, who controls it.
10. Children’s privacy
Our products are intended for businesses and their workforce, not for the general public, and our websites are not directed to children. Where an employer’s workforce includes workers under 18, that information is provided and managed by the employer in connection with employment.
11. Third-party websites and services
Our websites and products may link to or connect with third-party services (including the integrations and identity providers used to sign in). Their privacy practices are governed by their own policies, not this one.
12. Changes and how to contact us
We may update this Privacy Policy from time to time. The “Effective date” above shows the latest version, and we will provide additional notice for material changes where required.
Questions or requests: info@timeforge.com · 866-684-7191 Orcus Technologies, 5014 Gary Ave #6888, Lubbock, TX 79493
