Privacy Policy

TeamHours is a time tracking and budgeting platform built for companies that bill by the hour. This Privacy Policy explains what we collect, why we collect it, and how we handle the data you and your team record in TeamHours — including time entries, projects, budgets, and client reports.

We act as a processor for data you and your team submit to the service and as a controller for the basic account information needed to run it. We keep our policy plain, and we never sell your data. If anything here is unclear, write to privacy@teamhours.org.

Account data

When you create an account, we collect your name, work email address, and a password (stored only as a salted, hashed value). Workspace administrators may add team member details, roles, and billing rates on your behalf.

Workspace data

The service you put in the ledger: time entries, project and task names, budgets, hourly rates, client information, invoices generated from your hours, and notes attached to any of the above. This data belongs to your workspace and is used solely to operate the service.

Usage data

We collect limited technical data to keep the service fast and secure: IP address, browser type, device information, and coarse usage events (e.g. which pages you visit). We use this only to diagnose issues, prevent abuse, and improve the product.

We use your data only for these purposes:

• To provide, maintain, and secure the service you signed up for.
• To generate the reports, timesheets, and invoices you build in TeamHours.
• To send service notifications — approvals, budget alerts, and billing notices.
• To respond to support requests and investigate security incidents.
• With your consent, to send product updates and occasional feature announcements. You can opt out at any time.

We do not sell your data, use your workspace data for advertising, or build profiles about you for third parties. Ever.

We share data only in the narrow cases below, and always under contractual obligations at least as protective as this policy:

• Subprocessors. Hosting and infrastructure providers (cloud hosting, object storage, email delivery) that process data on our behalf under data processing agreements.
• Your team. Other members of your workspace see the data your administrator grants them access to — the same way they see it inside the app.
• Legal requirements. If required by law, subpoena, or court order, we will disclose data only after notifying you where permitted and attempting to narrow the request.
• Corporate transactions. If TeamHours is acquired or merged, data transfers with the business, subject to this policy continuing to apply.

We use cookies and local storage strictly for functional purposes: keeping you signed in, remembering your theme preference, and protecting against cross-site request forgery. We do not use third-party advertising cookies or track you across unrelated websites.

You can clear these at any time through your browser settings; you will simply be signed out and asked to re-authenticate.

Workspace data is retained for as long as your workspace is active, so your hour ledger remains a reliable paper trail. When a workspace is deleted — by its administrator or by us at your request — all workspace data is permanently erased from production and backups within 90 days.

Individual time entries can be edited or deleted at any time, and we honor account deletion requests within 30 days of verification.

Depending on where you live, you may have the right to access, correct, export, restrict, or delete the personal data we hold about you. Under the GDPR you also have the right to data portability and to lodge a complaint with your local supervisory authority; under the CCPA/CPRA you have the right to know what we collect and to opt out of sale — a right we honor globally even though we never sell data.

To exercise any of these rights, contact us at privacy@teamhours.org or raise the request with your workspace administrator. We respond to every verified request within 30 days.

TeamHours is a professional tool and is not directed at individuals under 16. We do not knowingly collect personal data from children, and we delete any such data we discover.

We will notify you of material changes to this policy by email or an in-app notice at least 30 days before they take effect. Continued use of the service after the effective date means you accept the updated policy.

Questions? Contact privacy@teamhours.org.