Privacy Policy

Last updated : March 20, 2026

1. Data collection

TimeTrack collects the following data to provide its services:

Identity data (name, email, hashed password)
Connection data (IP address, access logs)
Time entry data (timesheets, projects, hours worked)
Billing data (subscriptions, payments via Stripe)

2. Use of data

Your data is used to:

Provide and improve our services
Manage your account and subscriptions
Process payments and generate invoices
Send you important notifications
Comply with our legal obligations

3. Data protection

We implement appropriate security measures to protect your data:

Password encryption (bcrypt)
Two-factor authentication (2FA) available
Secure connections (HTTPS)
Restricted data access (multi-tenant)
Regular backups

4. Data sharing

We do not sell your data. We may share your data with:

Stripe: For payment processing (PCI-DSS compliant)
Resend: For transactional emails
Vercel: For application hosting
Prisma: For database management

All our providers are GDPR compliant and sign confidentiality agreements.

5. Your rights

In accordance with the GDPR, you have the following rights:

Right of access to your personal data
Right to rectification of inaccurate data
Right to erasure of your data
Right to data portability
Right to object to processing
Right to restriction of processing

To exercise these rights, contact us at: privacy@simpletimetrack.com

6. Data retention

Your data is retained for the duration of your subscription and up to 3 years after account closure, in accordance with our legal and accounting obligations.

7. Cookies

We use session cookies to maintain your authentication. These cookies are essential for the application to function and are not used for tracking purposes.

8. Modifications

We reserve the right to modify this privacy policy. Any changes will be communicated by email and published on this page.

9. Contact

For any questions regarding this privacy policy, contact us at: privacy@simpletimetrack.com