Privacy policy
Your records stay on your computer.
This policy explains what the Isohora software and this website do with information. It is written to be read, not skimmed past.
The short version
- Your files and results stay on your computer, in a folder you can see.
- Isohora opens one page on your own computer (127.0.0.1) and never connects to anything else. It has no telemetry, no update check and no outbound network code.
- Isohora does not handle biometric data. Time clock exports hold employee IDs and times only.
- We never receive your attendance data, so we cannot see it, correct it or delete it for you.
- Payments are handled by a merchant of record, not by the software and not by this website.
- This website sets no cookies, uses no analytics and makes no requests to other sites.
1. Who we are
Isohora is published by [Company legal name] ("we", "us"). This policy covers two things: the Isohora software that you run on your own computer, and this website.
You can reach us at [Contact email]. Our postal address is [Postal address].
2. The software and your data
Isohora runs entirely on your computer. It works with the following information, all of which stays there.
| Information | What it is |
|---|---|
| Punch records | The employee IDs and the dates and times from the clock files you import. Any extra columns in the file are kept as they came. |
| Staff list | The names, IDs and optional pay rates you enter or import. |
| Rules | Your recipes, saved file layouts, templates and settings. |
| Edits and history | Each change you make to a day, with the original value, the value after, the time, and the name of the signed-in user of your computer. |
| Licence key | If you bought a key, a copy of it. It contains the edition, the licensee name, the issue date and a serial number. |
| Exports | The summary, daily, payroll, PDF and history files you ask Isohora to save. |
All of this is kept in a database file and an exports folder inside a data folder on your computer. By default the data folder is in your user profile, at:
- Windows:
%LOCALAPPDATA%\Isohora
You can choose another folder. The data is kept as ordinary files in that folder, so anyone who can open the folder can read them. Keep it on a computer and in a user account that only the right people can use. The program's own log files contain no punch data, names or IDs.
3. What the software never does
- It has no telemetry. It collects no usage statistics.
- It has no update check and does not contact us for any reason. New versions are downloads you choose to get.
- It has no outbound network code. Isohora opens one page on your own computer (127.0.0.1) and never connects to anything else. It does not need an account.
- It does not upload your files, results or history.
- It checks licence keys on your computer, with no activation and no online check.
How this is checked
Our automated tests run the whole workflow (import, review, processing, export and the local screen) with network connections intercepted and record every attempt to connect to another computer. The expected number is zero. Another test checks that code able to use the network is not present outside the local screen's own server.
Isohora works without an internet connection. You need the internet only to buy and download it.
4. The local screen
You use Isohora in your web browser, but the page is served by the program running on your own computer. It is not a website on the internet.
- It listens on the loopback address (127.0.0.1) only, on a random port. Other computers cannot open it.
- Each launch creates a new random token. The launch link uses it once, then the browser holds a session cookie. The cookie is not readable by scripts, is not sent to other sites and is not used for tracking.
- The program checks the Host and Origin of each request, to stop other websites in your browser from using it.
- It sends no cross-origin (CORS) headers, so other websites cannot read its pages.
- Its pages load no scripts, fonts or images from other sites.
5. Biometric data
Isohora does not handle biometric data. Your fingerprint, face or card reader does that work on its own device. The file it exports holds employee IDs and times. Isohora reads those and nothing else: it does not read biometric template formats, and its database has no place to store them.
6. Files you open
A file from a clock or a spreadsheet could be damaged or hostile. Isohora limits file size, the number of lines and the length of fields, and guards against compressed files that expand to huge sizes. It never runs anything found in a file: no scripts and no formulas. When Isohora writes CSV or XLSX files, text that starts with a character a spreadsheet could treat as a formula, such as a name, is written out as plain text.
7. Your role
You choose which attendance records go into Isohora and what you do with the results. Because we never receive that data, we cannot see it, and we cannot correct it, export it or delete it for you. You hold it, and you are responsible for it under the law that applies to you.
Depending on where you operate, that law may ask you to tell your staff how their time records are used, to keep records for a set time, or to look after them in certain ways. Isohora helps by keeping data local and by keeping a history of changes. It does not give legal advice.
- Back up your data folder yourself. We cannot recover it.
- Delete your data by deleting the data folder, and any exports you saved elsewhere.
8. Purchases and licence keys
Payment is handled by a merchant of record. This is a separate company that takes your payment and applies local taxes at checkout. It is a separate controller of your payment data, with its own privacy policy. Isohora, the software, and this website never handle your card or billing details.
To issue and support your licence, we receive from the merchant of record the limited order details we need, such as the licensee name, a contact email and the edition you bought. [Describe any other order data received]
We use this information to issue your key, to answer your questions and to keep records of our sales. We do not use it to track what you do in Isohora, because we cannot see that.
9. This website
This website is built to be as quiet as the software.
- No cookies. The site sets none.
- No analytics. We do not measure visits, clicks or scrolling.
- No third-party requests. The pages load no fonts, scripts, images, maps, videos or buttons from other sites. Everything comes from the same place as the page.
- No stored data in your browser. The site does not use local storage or similar.
- No forms. Nothing you type here is collected.
Like any web server, the service that hosts these pages may keep basic technical logs, such as the IP address, the time, the page requested and the browser type. These are used to keep the site running. Our hosting service is [Hosting provider] and it keeps these logs for [Log retention period].
If you email us, we receive your email address and what you write. We use it only to reply, and we keep it for [Retention period for correspondence].
If you follow a link to a checkout page, you leave this website. That page belongs to the merchant of record and follows its own policy.
10. Your rights
Depending on where you live, the law that applies to you may give you rights over personal information held about you. These can include the right to ask what is held, to have it corrected or deleted, to object to how it is used, and to complain to a regulator.
- Information held by us, such as order details or emails: write to us and we will respond as the applicable law requires.
- Payment information: contact the merchant of record.
- Attendance data in Isohora: we hold none of it. It is on your computer, under your control. If you are an employee whose records are in an Isohora file, ask your employer.
11. How long we keep information
We keep licence and order records for [Retention period for licence and order records], or longer if a law requires it. Your attendance data never reaches us, so there is nothing to keep.
12. Changes to this policy
If we change this policy, we will update the effective date at the top of this page. The software and this website do not contact you, so we cannot send notices. Please check this page from time to time.
13. Contact
Questions about this policy? Write to [Contact email].