Perigee Cloud Connector — Privacy Policy

Applies to: the Perigee Cloud Connector — the remote MCP (Model Context Protocol) service that lets authorized users of a Perigee Cloud workforce analytics deployment access their organization's data from AI assistants such as Claude. Perigee Cloud is a brand of Cincinnati Time Recorder, Inc. d/b/a CTRNY ("we", "us"). For the perigeecloud.com website itself, see our website privacy policy.

What the connector does

The connector gives signed-in, authorized members of a customer organization read-only access to that organization's own historical workforce data (hours, overtime, labor cost, schedules, attendance exceptions, attendance points, and benefit balances) hosted in their dedicated Perigee Cloud environment.

Information we process

• Authentication identity. Sign-in is handled by Microsoft Entra ID using your work account. We receive and validate a token containing your work email address; we never see your password.
• Authorization records. Your organization's Perigee Cloud administrator maintains a roster deciding who may use the connector and what data scope each person has (for example, which departments, and whether pay amounts are visible). We store that roster in your organization's dedicated database.
• Workforce data. Query results are drawn from your organization's own data warehouse, populated from your organization's Attendance on Demand system under your organization's license. Each customer's data lives in an isolated, customer-dedicated database.
• Service telemetry. We log operational metadata about connector requests — which tool was called, when, by which account, success or failure, and timing — for security auditing, support, and reliability. Telemetry does not include your AI-assistant conversation content.

What we deliberately do not process

• Conversation content. Your prompts and the AI assistant's replies stay within your organization's AI assistant (for example, your Claude workspace, governed by your organization's agreement with Anthropic). The connector only receives the specific tool queries the assistant issues.
• Social Security numbers. SSNs are never ingested or stored anywhere in Perigee Cloud.
• Employee contact details via AI. Employee email addresses, home addresses, and phone numbers are automatically redacted from every response the connector returns to an AI assistant.

How we use information

To authenticate and authorize requests, return the data you ask for, secure and audit the service, diagnose problems, and improve reliability. We do not sell personal information, use it for advertising, or use customer data to train AI models.

Storage and security

Customer data is hosted in Microsoft Azure (United States, East US 2) in per-customer isolated databases. Secrets are held in Azure Key Vault. Access to the connector requires a valid Microsoft Entra ID token plus an explicit per-user grant from your organization's administrator; ungranted users are refused. All traffic is encrypted in transit (HTTPS).

Third parties

• Microsoft Azure / Microsoft Entra ID — hosting and sign-in.
• Attendance on Demand — the source system for your organization's workforce data, under your organization's existing license.
• Anthropic (Claude) — processes your conversations under your organization's Claude agreement; we do not send them anything beyond the responses to the queries the assistant makes on your behalf.

We share personal information with no other third parties except as required by law.

Retention

• Workforce warehouse data: retained for the life of your organization's subscription and deleted on deprovisioning.
• Service telemetry and logs: retained 2 years, then deleted.
• Authorization roster: retained while your organization's service is active.

Your choices and rights

Access to the connector is controlled by your organization's administrator — contact them to change or revoke your access or data scope. For privacy questions or requests concerning data we hold, contact us at Legal@CTRNY.com. We respond within a reasonable period and honor applicable data-protection rights.

Changes

We will post updates to this policy at this URL with a revised effective date.

Contact

Cincinnati Time Recorder, Inc. d/b/a CTRNY, PO Box 5015, East Hampton, NY 11937 — Legal@CTRNY.com. Product support: support@ctrny.com.