Privacy Policy

Tracking Tabs (“we”, “us” or “our”) operates Tracking Tabs. This policy explains what information we collect, how we use it and the choices you have.

1. Information we collect

Information you provide

• Account information: email address, full name and password
• Workspace data: workspace name, clients, projects, tasks, tags and team members
• Time entries: descriptions, durations, timestamps and rates
• Invoice details: business name, address, logo and your clients' billing email addresses
• Billing information: handled by Stripe. We do not store payment card numbers.

Information collected automatically

• Server logs: IP address, browser type and request times
• Workspace activity recorded in the audit log, such as members invited or settings changed
• Cookies: session cookies that keep you signed in

2. How we use your information

• To provide, secure and improve the service
• To process payments through Stripe
• To send service emails such as invitations, trial reminders, receipts and invoices you send
• To send the weekly summary and missing-time emails, which you can turn off
• To detect and prevent fraud or abuse
• To comply with legal obligations

3. AI features

When you use AI features (project suggestions and the weekly summary), the relevant time entry descriptions and project names are sent to Anthropic's API to generate a response. Anthropic does not use data sent through its commercial API to train its models. You can turn these features off in Settings → Notifications.

4. Service providers

We do not sell your personal data. We share it only with providers that run parts of the service:

• Supabase: database and authentication
• Vercel: hosting
• Stripe: payment processing
• Resend: email delivery
• Anthropic: AI features
• Google: only if you connect Google Calendar
• Slack: only if you connect Slack

If you create webhooks or connect tools through the API, we send data to the destinations you configure.

5. Data retention

We keep your data while your account is active. If you ask us to delete your account, we delete your data within 30 days, except where we must keep records to meet legal obligations. The audit log shows the last 90 days of activity.

6. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Export your data in a machine-readable format (Settings → Export)
• Opt out of non-essential emails (Settings → Notifications)

To exercise these rights, email support@trackingtabs.com.

7. Security

Data is encrypted in transit with HTTPS. Row-level security in the database keeps each workspace's data separate. Passwords are hashed by our authentication provider, and personal access tokens are stored as hashes.

8. Cookies

We use only the cookies needed to keep you signed in. We do not use advertising or tracking cookies.

9. Children

The service is not directed to children under 13, and we do not knowingly collect data from them.

10. Changes

We may update this policy. We will email account owners about significant changes. Continued use after a change means you accept the updated policy.

11. Contact

Questions or concerns? Email support@trackingtabs.com.