Privacy Policy

WorkTimeTracker ("we", "us", or "our") provides a time tracking, project management, and invoicing service for small teams. This Privacy Policy explains what information we collect when you use the service, how we use it, and the choices you have.

1. Information we collect

We collect information you provide directly, information generated as you use the service, and a limited set of information from third parties needed to operate the service.

• Account information. Your name, email address, password (stored hashed), workspace name, and authentication credentials such as passkeys or one-time codes.
• Workspace content. Time entries, projects, clients, invoices, tags, goals, and any other data you enter into the service.
• Billing information. Subscription status and plan, processed through our payment provider (Polar). We do not store full card numbers.
• Technical data. IP address, browser and device characteristics, pages visited, and timestamps, used to keep the service running and secure.
• Communications. Messages you send us by email, in support tickets, or through forms on this site.

2. How we use information

We use the information described above to:

• Provide, maintain, and improve the service;
• Authenticate you and prevent fraud or abuse;
• Process payments and send billing notifications;
• Send service announcements, security alerts, and (with your consent) product updates;
• Provide customer support and respond to your requests;
• Comply with legal obligations.

3. Sharing

We do not sell your personal information. We share information only with the service providers necessary to operate the service — for example, our cloud infrastructure provider (Cloudflare), our payments provider (Polar), our email provider, and any integration you explicitly connect (such as Slack). Each provider is bound by contractual confidentiality and security obligations.

4. Data retention

We retain workspace content for as long as your account is active. If you delete your account or workspace, we delete or anonymize associated content within 30 days, except where we are required to retain it for legal, accounting, or fraud-prevention purposes.

5. Security

We use encryption in transit, encryption at rest where supported by our infrastructure, scoped access controls, and routine logging. No system is perfectly secure — if we become aware of a breach that affects your data, we will notify you in accordance with applicable law.

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. To exercise any of these rights, contact us at privacy@worktimetracker.app.

7. Children

WorkTimeTracker is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

8. International transfers

WorkTimeTracker operates globally. By using the service, you understand that your information may be processed in countries other than the one in which you live, including in the United States.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date above and, for material changes, give you reasonable notice before the changes take effect.

10. Contact

Questions about this policy? Email us at privacy@worktimetracker.app.