Privacy Policy

Last updated October 12, 2026

1. Who is responsible for your information

Time@ is run by Time@ ("we", "us"). There are two roles:

• The company that uses Time@ (your employer or the team you work for) decides what is tracked and who can see it. For the time, activity and schedule information about their team, they are in charge and we process it for them.
• We are responsible for the information about company admins and billing that we need to run accounts, and for keeping the service secure.

2. What we collect

Account information. Name, work email, role, time zone, and a password that we store only in scrambled form so nobody, including us, can read it. If you sign in with Google or Microsoft, we receive the name and email they confirm to us.

Work information, only while someone is clocked in. The desktop app and browser extension record:

• Clock in and clock out times and the project chosen.
• The name of the application or website in front of the person, and the page title.
• Screenshots, if the company has turned them on. The default is every 3 minutes, and the company can change or turn this off.
• How many times the mouse was clicked and keys were pressed, counted per minute. We count the number, never what was typed. Mouse movement is not counted.
• Time with no activity, shown as idle.

When someone is clocked out, nothing is recorded.

Schedule and pay information. Schedules, availability, time off, and pay rates and payroll figures, if the company enters them.

Security and device information. Sign-in times, IP addresses and device details, and a record of important changes made by admins, so we can keep accounts safe and investigate problems.

Billing information. Billing contact and the number of people who tracked time. Card details are handled by Stripe. We do not store full card numbers.

This website. The public pages at timeat.io do not use advertising or analytics trackers. The app uses a sign-in cookie that keeps you signed in. It is not used for advertising.

3. Who can see it

• Team members can see their own time.
• Admins and managers at the company can see information about their team, based on the permissions the company sets. Screenshots are shown to managers according to the company's settings, and to team members only if the company allows it.
• A small number of our people can access company data when needed to run the service, fix a problem or answer a support request, and only for that purpose.

4. How we use information

• To provide the service: timesheets, schedules, reports, alerts, approvals and payroll exports.
• To send service messages such as sign-in links, password resets, invites, trial reminders and receipts.
• To keep the service secure, prevent abuse and fix problems.
• To meet legal duties.

We do not sell personal information. We do not use it for advertising, and we do not use your company's time and activity data to build profiles for anyone else.

5. Who we share it with

We share information only with the companies that help us run the service, and only what they need:

• Stripe, to take payments.
• Our email provider, to deliver messages we send.
• Our hosting provider, which stores the data on servers. Those servers may be outside the state or country where you live.
• Google or Microsoft, only if you choose to sign in with them.

If the company that uses Time@ connects its own tools, for example through the API or webhooks, it can send its data there. That is the company's choice. We may also share information when the law requires it, or to protect people from harm.

6. How long we keep it

• Screenshots are kept for the number of days the company chooses. The default is 60.
• Other company data is kept while the company uses Time@, so timesheets and reports stay complete.
• If a company closes its account or asks us to, we delete its data within 30 days. Short term backups expire on their own schedule after that.
• We may keep billing records as long as the law requires.

7. How we protect it

Connections to Time@ are encrypted. Passwords are stored in scrambled form. Each company's data is kept separate from every other company's. Companies can require two-step sign-in. Access by our own people is limited. No system is perfectly secure, and if something happens that affects your information, we will tell the company and follow the laws on notice.

8. Your choices

• Team members: your employer decides what is tracked. To see, correct or delete information about you, ask your employer's admin first. If you cannot reach them, email us and we will help.
• Company admins: you can change what is captured, how long screenshots are kept, and who can see what, in your settings. You can export your data and ask us to delete it.
• You can ask us about this policy any time at hello@timeat.io.

9. Children

Time@ is for workplaces. It is not meant for anyone under 18 and we do not knowingly collect information from children.

10. Changes

If we change this policy in an important way, we will email company admins before it applies. The date at the top shows the latest version.

11. Contact

Time@
Email: hello@timeat.io