Privacy Policy

Rekord is a human resources management application provided by Amalgam Partners ("Amalgam Partners," "we," "us") to businesses ("Customers") for use by their own employees ("Users"). This policy explains what information Rekord collects, how it is used, and how it is protected.

Who this applies to

Rekord is a business-to-business product. Each Customer creates a company account and invites its own employees to join it. If you are a User, your employer (the Customer) controls your account and determines how long your data is retained. If you have questions about your personal data, please contact your employer's administrator first, in addition to us.

Information we collect

To provide the service, Rekord stores information that Users and Customers enter directly, including:

• Account information: name, work email address, job title, and reporting relationship (manager/employee).
• Timesheet entries, PTO requests and balances, annual goals, performance evaluations, and expense reports (including uploaded receipt files).
• Optional profile details a User chooses to add, such as a mailing address, phone number, and emergency contact information.
• Files uploaded by a Customer's administrators, such as benefits documents.
• Basic technical data such as login timestamps, used to secure accounts and diagnose issues.

How we use information

We use the information described above only to operate Rekord for the Customer that collected it, specifically to:

• Display timesheets, PTO, goals, evaluations, expenses, and team information to the right Users within a company.
• Route approvals to the correct manager and generate reports for managers and administrators within the same company.
• Send account-related emails, such as confirming a new account.
• Maintain the security and integrity of the service.

We do not sell personal information, and we do not use it for advertising. Data belonging to one company is never shown to Users of a different company.

Optional Google integration

Rekord offers an optional feature that lets a User export their own reports (such as timesheets or expenses) to a Google Sheet of their choosing. This feature only activates if a User explicitly connects their Google account, and it only requests permission to create and edit files that Rekord itself creates in the User's Google Drive (Google's limited, non-sensitive drive.file scope). Rekord cannot see, list, or modify any other files in a User's Drive. Report data is sent to Google only at the moment a User clicks to export, and only to the destination they choose.

Where data is stored

Rekord is hosted on Vercel and stores data with Supabase, both of which provide encryption of data in transit. Access to a company's data is restricted, at the database level, to authenticated Users belonging to that same company.

Data retention and deletion

Data is retained for as long as the Customer's account is active. A Customer administrator may request deletion of their company's data, or of an individual User's account, by contacting us at the address below.

Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page.

Contact us

Questions about this policy can be sent to privacy@amalgampartners.com.