Privacy Policy

hrlite is lightweight HR software for small teams, providing people management, time tracking, leave, payroll, e-signature contracts, and announcements. This policy explains what personal data we collect, why, and the choices you have. If you have questions, contact us at support@hrlite.work.

• Account data — your name, email address, password (stored hashed), and time zone when you create an account.
• Organization & HR data — information you and your team add, such as team member profiles, pay rates, time entries, leave requests, payroll runs, contracts, and documents.
• Billing data — handled by our payment processor. We store your subscription status and plan, but we never see or store full card numbers.
• Usage & analytics data — if you consent, we collect anonymized usage statistics (pages visited, general device and browser information) to improve the product. No analytics cookies are set until you accept them.

• To provide, operate, and secure the hrlite service.
• To process payroll, generate payslips, and send transactional email such as invites and notifications.
• To manage billing and subscriptions.
• To understand usage and improve features (only with your analytics consent).
• To respond to support requests and comply with legal obligations.

We use strictly necessary cookies to keep you signed in and secure — these are required for the app to function. We also use Google Analytics to understand how hrlite is used, but analytics cookies are only set after you accept them in our cookie banner. You can change your choice at any time using the Cookie settings link in the footer. Declining analytics does not affect your ability to use hrlite.

We share data only with trusted providers that help us run hrlite, under agreements that protect your information:

• Supabase — database, authentication, and file storage.
• Stripe — subscription billing and payment processing.
• Resend — delivery of transactional email (payslips, invites, notifications).
• Google Analytics — product usage analytics, only with your consent.

We do not sell your personal data to anyone.

We keep your data for as long as your account is active. When you close your account, we delete or anonymize your personal data within a reasonable period, unless we are required to retain it to comply with legal, tax, or accounting obligations.

Depending on where you live (including under the EU/UK GDPR), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can also withdraw analytics consent at any time via Cookie settings.

To exercise any of these rights, email us at support@hrlite.work. If your data was added by an employer using hrlite, that organization is the controller of your data and we may direct your request to them.

Each organization's data is isolated using PostgreSQL row-level security, and access is protected by secure authentication. We use industry-standard measures to protect your data in transit and at rest, though no method of transmission or storage is completely secure.

We may update this policy from time to time. When we make material changes, we will update the date below and, where appropriate, notify you. Your continued use of hrlite after an update means you accept the revised policy.

Questions about this policy or your data? Email support@hrlite.work.