How we handle your data
Written in plain language, and current as of this page's last deploy. This is a statement of how the product actually works, not a legal agreement.
What we store
Whatever you put in: your people's records, time off, attendance, candidates, reviews, and compensation figures if you use payroll prep. Files you upload — documents and CVs — go to private storage, reachable only through short-lived signed links.
Who can read it
Access is decided by the database, not by the interface. Every table denies by default and grants per role: an employee sees themselves and the public directory, a manager sees their reporting line, HR sees the organisation. Compensation is narrower still — managers have no access to it at all. Separate organisations cannot see each other under any circumstances, and that is the property we test hardest.
What we never do
We do not compute tax or statutory deductions — payroll prep produces figures your provider then applies rules to. We do not sell or share your data, and we do not train anything on it. There is no third-party analytics inside the application.
Where it lives
On Supabase (Postgres) and Vercel. Both are US-headquartered providers with regional hosting; tell us if you need a specific region before you commit to us.
Deleting things
Records with history — people, requests, candidates — are soft-deleted, so they leave your screens but remain recoverable and auditable. Ledgers and the audit log are append-only by design: a correction is added beside the original rather than replacing it. Ask us and we will delete an entire organisation outright.
What is not in place yet
We are early, and these are honest gaps rather than oversights: there is no signed data processing agreement, no published retention schedule, no SOC 2 or ISO certification, and no formal breach-notification SLA. If any of those are a requirement for you, say so before you start — we would rather tell you now than after you have moved your people in.
Asking us anything
contact@mauksolutions.com. A person reads it.