Privacy & security
Your data stays in the EU
Working hours, contracts and payroll data are sensitive. Here is where Mayora stores them and what is in place technically – without certification seals and without promises of “100 % security”.
Where your data lives
Mayora runs on Google Cloud (Firebase) in European data centres.
- DatabaseEurope – multi-region eur3 (Belgium and the Netherlands)
- Server functionsBelgium – europe-west1
- Files (e.g. photos in damage reports)Frankfurt am Main – europe-west3
- Static website filesglobal CDN (only the website's program files, no business data)
For sign-in (Firebase Authentication) and push notifications, Mayora uses Google services where processing outside the EU is possible. These transfers are covered by the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. The full list is in the privacy policy and the data processing agreement.
What is in place
A data processing agreement at sign-up
Whoever creates a company accepts the terms, the data processing agreement (Art. 28 GDPR) and the privacy policy; the version, time and person are stored. You remain the controller of your staff's data; Mayora processes it on your behalf.
Roles and teams
Employee, team lead, read-only team lead and administrator. Team leads see and decide only for their own teams. Permissions are checked on the server, not only in the app.
Audit log
Important changes – for example to roles, contracts, settings and approvals – are logged and visible to administrators.
Deletion with a restore window
A personal account can be restored for 30 days and a company for 90 days – or deleted at once. Only the owner can delete a company, by typing its name after signing in again.
Retention under German tax law
Businesses must keep invoices, accounting records and working-time records for years (§ 147 AO, § 257 HGB). If an employee deletes their account, the employer's records stay and are anonymised after 10 years.
Access and export for employees
Every person can download their own data – profile, contract, punches, shifts, requests and more (Art. 15 and 20 GDPR).
No covert tracking
Location is off by default. If you use it, staff see every location request in their profile; positions are deleted after 90 days. The kiosk uses no fingerprints or face recognition, and PINs are stored only as a hash.
Separate tenants
Each company sees only its own data. Mayora's admin console is built so that it cannot read your company's working data – punches, shifts, requests.
Works council and transparency
Time tracking, the kiosk and location can be subject to co-determination under § 87(1) no. 6 BetrVG. If your company has a works council, agree the settings with it first. Mayora shows staff which location option applies and marks kiosk and offline punches.
This website
This website sets no cookies, uses no analytics and loads no fonts, scripts or images from third parties.
Read the privacy policy · Read the data processing agreement (AVV)