This Privacy Policy explains how Corpworks Limited ("Knockoff", "we", "us", "our") collects, uses, stores, discloses and protects personal information when you use the Knockoff app and website. We handle personal information in accordance with the New Zealand Privacy Act 2020 and its Information Privacy Principles (IPPs).
1 Who we are
Knockoff is a timesheet and payroll-preparation service for New Zealand businesses, operated by Corpworks Limited, a company incorporated in New Zealand (GST number 121905558). If you have any questions about this policy or your personal information, contact us at hello@knockoff.co.nz.
2 Who this policy covers
This policy applies to two main groups:
- Account owners — the business owner or manager who signs up for and pays for Knockoff.
- Crew members — staff whose details are added to Knockoff by an account owner so they can record their hours.
If you're a crew member, the business you work for is the one that decides what information goes into Knockoff about you. We process that information on their behalf as well as being responsible for it under the Privacy Act. If you have questions about your data, you can contact either your employer or us.
3 Information we collect
Account and contact information
When an owner signs up, we collect their email address (used for passwordless "magic link" sign-in) and basic business details they choose to enter, such as business name and payroll setup preferences.
Crew and timesheet information
Owners add crew members and enter information such as each person's name and a login PIN. Crew then record timesheet data including start and finish times, breaks, job sites and hours worked.
Location information
When a crew member clocks in or out, the app asks their device for its location and records the GPS coordinates and an approximate street address for that clock-in and clock-out, stored alongside the timesheet. This helps confirm work was recorded at the job site. If location isn't available or is declined on the device, the entry is still recorded and simply notes that the location was unavailable. Coordinates are converted to an address using the OpenStreetMap service (see section 6).
Payment information
When you subscribe to a paid plan, payment is processed by Stripe. Stripe collects and holds your card details — we do not see or store full card numbers. We receive limited billing information from Stripe such as your subscription status, the last four digits of your card, and invoice records.
Technical and usage information
Like most online services, we may automatically collect technical information such as device type, browser, IP address and log data, to keep the service secure and working properly.
4 How we collect information
We collect most information directly — from owners when they sign up and use the app, and from crew when they submit timesheets.
5 How we use your information
We use personal information to:
- Provide the Knockoff service — recording hours, calculating paid time, approvals and payroll exports;
- Authenticate owners (magic-link sign-in) and crew (name + PIN);
- Process subscriptions, billing and GST invoicing through Stripe;
- Provide customer support and respond to your enquiries;
- Keep the service secure, prevent misuse, and meet our legal obligations;
- Improve and maintain the app.
We do not sell your personal information, and we do not use it for third-party advertising.
6 Who we share information with
We share personal information only with service providers who help us run Knockoff, and only as needed:
- Supabase — our database and application infrastructure provider, which stores your account, crew and timesheet data.
- Stripe — our payment processor, which handles subscriptions, cards and invoicing.
- Email delivery providers — used to send sign-in links and service emails.
- OpenStreetMap (Nominatim) — used to turn clock-in/out GPS coordinates into a readable street address.
These providers are only permitted to use your information to provide their services to us. We may also disclose information where required by law, or to protect our legal rights or the safety of others.
7 Overseas storage and disclosure
Some of our service providers (including Stripe and Supabase) may store or process information on servers located outside New Zealand. Where we disclose personal information overseas, we take reasonable steps to ensure it is protected by comparable safeguards to those under the New Zealand Privacy Act, consistent with IPP 12. By using Knockoff, you acknowledge that your information may be stored and processed overseas by these providers.
8 Storage and security
We take reasonable technical and organisational steps to protect personal information against loss, misuse and unauthorised access, including access controls and encrypted connections. No online service can be guaranteed to be completely secure, but we work to keep your data safe and to respond quickly if a problem arises.
9 How long we keep information
We keep personal information for as long as your account is active and for a reasonable period afterwards, so we can meet legal, tax and record-keeping obligations. When information is no longer needed, we take reasonable steps to delete or de-identify it. Owners can request deletion of their account data by contacting us.
10 Your rights — access and correction
Under the Privacy Act 2020 you have the right to ask for a copy of the personal information we hold about you, and to ask us to correct it if it's wrong. Owners can view and update much of their information directly in the app. For anything else, email hello@knockoff.co.nz and we'll help. Crew members can also contact their employer, who controls their information within Knockoff.
11 Cookies
We use only the cookies and similar technologies necessary to keep you signed in and to run the service securely. We do not use third-party advertising or tracking cookies.
12 Children
Knockoff is a tool for businesses and their workers. It is not intended for use by children, and we do not knowingly collect information from anyone under the minimum legal working age for the roles it is used for.
13 Changes to this policy
We may update this policy from time to time. When we make material changes, we'll update the "last updated" date above and, where appropriate, let account owners know. Continuing to use Knockoff after a change means you accept the updated policy.
14 Complaints and contact
If you have a concern about how we've handled your personal information, please contact us first at hello@knockoff.co.nz so we can try to put it right. You also have the right to complain to the Office of the Privacy Commissioner (privacy.org.nz).