How Leavewise handles employee and workspace data

We collect workspace details, employee account information, authentication records, leave balances, and leave request history.

We may also log technical data such as IP address, user agent, and password reset activity to protect account security.

We use data to authenticate users, keep requests scoped to the correct organization, support approvals, and surface reporting for HR teams.

We do not sell customer data, and we do not use employee leave records for advertising.

Passwords are stored as salted hashes, sessions are maintained with HTTP-only cookies, and reset tokens are single-use and time-limited.

We retain records for as long as the organization maintains an active workspace or as required for lawful operational purposes.