Employee Time Logger stores workforce records in the WordPress database. The site owner controls access, backups, employee privacy responses, retention periods, exports, and uninstall behavior.
Required access: Data and privacy settings require Employee Time Logger settings-management permission. Audit and deleted-entry access use separate permissions.
Inventory the data before launch
- Employee account identifiers and contact information.
- Clock-in, clock-out, break, lunch, work-date, project, and note data.
- Schedules, attendance results, leave requests, balances, and policy assignments.
- Timesheet certifications, approvals, payroll periods, rates, exports, and exception decisions.
- Kiosk actions, hashed PIN credentials, and failed-attempt protection data.
- Event coordinates when Location Verification is enabled.
- Audit events and notification-delivery records.
Use this inventory to prepare access rules, employee notices, retention schedules, backup procedures, and secure support processes.
Configure employee self-service data controls
- Go to Time Logger > Tools > Data & Privacy.
- Choose whether employees may download their own timesheet CSV files.
- Choose whether employees may submit time-correction requests.
- Leave permanent uninstall erasure disabled unless deletion is deliberate and authorized.
- Select Save data controls.
- Test the employee page with a non-Administrator account.
The Employee Self-Service master and sub-feature switches under Settings > Features must also allow the selected function.
Review the Audit Log
- Go to Time Logger > Tools > Audit Log.
- Filter or locate the relevant date, user, action, or record.
- Review who performed the action, when it occurred, what object was affected, and available change details.
- Compare the audit event with the active record and related workflow.
Typical events include time edits, correction requests and decisions, deletions and restorations, pay-period transitions, approvals, exports, schedules, leave actions, projects, teams, feature settings, kiosk actions, and license-status changes.
Understand deleted entries
A normal time-entry deletion is a soft deletion. It disappears from active reports but remains under Time Logger > Tools > Deleted Entries during the configured retention period.
- Before deleting, confirm the exact employee, work date, and entry.
- After deleting, review Deleted Entries.
- To restore, confirm the related pay period is Open.
- Select Restore and recheck Time Entries and payroll totals.
Configure retention periods
| Record | Location | What to decide |
|---|---|---|
| Soft-deleted Lite entries | Time Logger > Settings > General | Select the available retention duration that meets the organization's reviewed policy. |
| Location events | Settings > Workforce Policies | Keep precise coordinates only as long as necessary for the disclosed purpose. |
| Notification delivery log | Settings > Notifications | Retain enough history for delivery troubleshooting without keeping it indefinitely. |
| Backups and exports | Outside the plugin | Coordinate host backups and downloaded files with the same retention policy. |
Use WordPress personal-data tools
- For a request, go to Tools > Export Personal Data or Tools > Erase Personal Data.
- Enter and confirm the requester's email according to WordPress procedure.
- Review the generated data before delivery.
- Document any records retained for a valid business or legal reason.
Employee Time Logger contributes supported data to WordPress privacy requests. Erasure may remove or anonymize location, kiosk, PIN, and free-form note data while core employment, time, payroll, leave, schedule, and audit records may be retained by the site owner for recordkeeping.
Protect downloaded files
- Store exports only in approved systems.
- Do not attach payroll or precise-location files to ordinary support tickets.
- Limit access to employees, supervisors, payroll, and Administrators according to role.
- Remove local downloads from shared devices.
- Include exported copies in the organization's retention and destruction schedule.
Understand uninstall behavior
Deleting a plugin preserves its records by default. Lite and Pro have separate erasure controls.
Pro erasure
- Go to Time Logger > Tools > Data & Privacy.
- Select the permanent-erasure option.
- Type ERASE exactly in the confirmation field.
- Save the setting.
Lite erasure
- Go to Time Logger > Settings > General.
- Select Permanently erase plugin data when Lite is uninstalled.
- Select Save settings.
Removing Pro does not remove Lite data unless Lite is separately deleted with its own erasure setting enabled.
Safe uninstall checklist
- Confirm written authorization for permanent deletion.
- Export all required time, payroll, leave, schedule, and audit records.
- Create and verify a restorable backup.
- Confirm payroll, tax, labor, litigation-hold, and privacy obligations.
- Enable the appropriate erasure control only after those checks.
- Delete the intended plugin and verify the result.
Warning: Permanent uninstall erasure is irreversible except through a valid backup.
Troubleshooting and review
| Issue | Resolution |
|---|---|
| Employee download is missing | Enable Employee Self-Service, Timesheet Downloads, and the matching Data & Privacy setting. |
| Deleted entry cannot be restored | Reopen its pay period and confirm retention has not permanently removed it. |
| Location records remain longer than expected | Check Location Retention sub-feature, configured period, and scheduled-task status. |
| Audit event is not visible | Check permission, date range, record type, and whether the action is one captured by the audit system. |
Policy notice: Retention and privacy obligations vary. Configure these controls only after reviewing the rules and policies that apply to the organization.
