Privacy Policy
Last updated: March 10, 2026

Data We Collect

To provide Timesheet Buddy, we collect and store information
you provide when using the platform:

- Account information — your name and email address, provided
  through our authentication provider (WorkOS).
- Organization and client data — organization name, client
  names, and project names you create to organize your
  timesheets.
- Work logs — task descriptions and timestamps you submit via
  the web app, mobile companion, or Slack integration.
- Timesheets and templates — timesheet layouts, saved presets,
  and generated timesheet archives.
- Calendar data — holiday calendars and day-off exceptions you
  configure for timesheet generation.

Cookies and Analytics

We use the following cookies:

- Session cookies (wos-session, en_session, en_toast) — strictly
  necessary to keep you signed in and the app functioning. These
  do not require consent.
- cookie_consent — stores your analytics consent choice. This is
  a strictly necessary cookie.

With your consent, we use PostHog (hosted in the EU, Frankfurt)
for product analytics. PostHog collects:

- Page views, referring domains, and navigation patterns.
- Browser type and version, operating system, and device type.
- Approximate location (city-level, derived from your IP address;
  the raw IP is not stored by PostHog).
- Performance metrics (page load times, web vitals).
- Session data via cookies to recognize returning visitors.

We do not use advertising cookies or tracking pixels. PostHog
data is used solely to understand how the platform is used and
to improve it.

You can accept or decline analytics cookies when first visiting
the site. You can change your choice at any time from the user
menu in the app. If you decline, PostHog is not loaded and no
analytics data is collected — the app works the same either way.

How We Use Your Data

Your data is used solely to operate and improve Timesheet
Buddy. We do not sell, rent, or share your information with
third parties for marketing or advertising purposes.

Third-Party Services

We rely on a small number of third-party services to run the
platform:

- WorkOS — authentication and single sign-on.
- Fly.io — application hosting and database storage (Frankfurt, EU).
- Slack — if you choose to connect your Slack workspace for
  work logging.
- PostHog — product analytics (EU Cloud, Frankfurt).

These providers process data only as necessary to deliver
their services and are subject to their own privacy policies.
All application and analytics data is processed within the EU.

Your Rights

You have the right to:

- Access your data — export a copy of all your data in JSON
  format from the My Footprint page (/footprint).
- Delete your data — permanently delete all your data from the
  My Footprint page. This action is irreversible.
- Withdraw consent — change your analytics cookie preference at
  any time from the user menu in the app.
- Data portability — your exported data is in a standard,
  machine-readable format (JSON).

Data Retention and Deletion

We retain your data for as long as your account is active.
You can export or delete your data at any time from the
My Footprint page (/footprint). You can also contact us at
support@tsbuddy.pro if you need assistance.

Security

We use HTTPS encryption for all data in transit and follow
industry-standard practices to protect your data at rest.

Changes to This Policy

We may update this policy from time to time. Changes will be
posted on this page with an updated date. Continued use of
the platform constitutes acceptance of any changes.

Contact

Questions about this policy? Reach us at support@tsbuddy.pro.