Privacy Policy

1. Who we are

HR Coop is a product of MFR Strategies, LLC ("we," "us," or "our"), a company registered in Indiana with its principal place of business at 14564 Boysenberry Dr., Fishers, IN 46038. Our general company website is mfrstrategies.com.

This Privacy Policy explains how we collect, use, disclose, and protect information when you use HR Coop ("the Service") at hrcoop.com and app.hrcoop.com.

2. Information we collect

Account and organization data — When an organization is set up, we collect the organization name, administrator name, and email address. We also store location names and configuration settings you provide.

Employee records — As part of the Service, organizations add employee names, job titles, locations, and employment status. This information is entered by authorized managers or HR personnel and is owned by the subscribing organization.

Attendance and documentation records — The core function of HR Coop is storing attendance events (call-offs, tardiness, no-call no-shows, etc.) and documentation records (coaching notes, written warnings, positive feedback). These records are created by managers and are associated with individual employees.

Usage data — We automatically collect standard web server logs and anonymized analytics data (pages visited, session duration, browser type) to understand how the Service is used and improve performance.

Payment data — Billing information (credit card numbers, billing address) is collected and processed directly by Stripe. We store only your Stripe customer ID and subscription status — we never see or store full payment card details.

3. How we use your information

• To provide, maintain, and improve the HR Coop platform
• To authenticate users and enforce role-based access controls
• To send transactional emails (account setup, alerts, notifications) that are part of the Service
• To process subscription payments and manage billing through Stripe
• To respond to support requests and demo inquiries
• To monitor for security issues, abuse, or terms violations
• To comply with legal obligations

We do not sell your data or the data of your employees to third parties. We do not use employee records for advertising or profiling.

4. How we share your information

We share data only with the third-party services required to operate the platform:

• Supabase — our database and authentication infrastructure. Data is stored in their US-based cloud environment.
• Stripe — payment processing. Governed by Stripe's Privacy Policy.
• Resend — transactional email delivery for notifications and alerts.
• Vercel — hosting and edge infrastructure for the marketing site.

We may also disclose information if required by law, court order, or to protect the rights and safety of MFR Strategies, LLC, our users, or the public.

5. Data ownership and retention

Your organization owns the data it enters into HR Coop — including employee records, attendance logs, and documentation. We are the data processor; you are the data controller.

We retain account and record data for the duration of your active subscription. Upon cancellation, your data is retained for 90 days, during which you may request an export. After 90 days, data is permanently deleted from our systems unless retention is required by law.

6. Security

We use industry-standard security practices including encryption in transit (TLS), encryption at rest, row-level security (RLS) policies that enforce role-based access at the database level, and regular access audits. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to retention requirements)
• Export your data in a portable format

To exercise any of these rights, contact us at hello@hrcoop.com.

8. Cookies

HR Coop uses session cookies for authentication and local storage for user preferences. The marketing site uses anonymized analytics cookies (Vercel Analytics) to understand traffic patterns. We do not use third-party advertising cookies.

9. Children's privacy

HR Coop is a business tool intended for use by adults in a professional context. We do not knowingly collect personal information from anyone under 18. If you believe a minor's data has been submitted, contact us and we will remove it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page and, for material changes, notify account administrators by email. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact us

Questions about this Privacy Policy or how your data is handled? Reach us at: