Privacy & Data Protection Policy

Last updated: August 2026

1. Zero Data Monetization

We do not sell, monetize, or share your proprietary time records, client billing rates, or employee metadata with third-party advertisers. Your tracking data belongs strictly to you and your organization.

2. Encryption Standards

All database storage is encrypted with AES-256 at rest, and all web traffic is secured over TLS 1.3 in transit. We leverage state-of-the-art cryptographic standards to ensure your workspace remains secure from unauthorized access.

3. Data Export & Deletion

You retain 100% ownership of your records. You can export your complete organization data to JSON/CSV directly from your dashboard, or permanently wipe your databases via administration panels with a single click. We adhere closely to GDPR and CCPA right-to-erasure requirements.

4. Analytics

We use industry-standard tracking technologies (such as Google Analytics) solely for product optimization and to understand user engagement patterns on our public landing sites. In-app analytics are strictly aggregated and anonymized.

5. Third Party Services

Any integrations utilized (e.g. Jira, GitHub, Slack) authenticate via standard OAuth2 protocols. We only process data required to execute the specific integration (e.g. syncing issue keys), and we respect all external provider privacy mandates.