Privacy Policy

1. Who we are

TimeWiseHub is operated by Vividex. We provide a cloud-based productivity platform for tracking work hours, managing expenses, and organising projects. You can contact us at abbotts.automotive@gmail.com.

2. What data we collect

• Account data: email address, full name, timezone, and password (stored as a secure hash by Supabase Auth).
• Time entries: start/end times, durations, and descriptions you log.
• Expenses: amounts, currencies, categories, dates, descriptions, and any receipt images you upload.
• Projects and tasks: names, descriptions, due dates, priorities, and notes you create.
• Activity log: a timestamped record of actions taken within the platform (creates, updates, deletes).
• Billing data: subscription plan and status. Payment card details are handled entirely by Stripe and never stored on our servers.
• Push subscriptions: browser push endpoints if you opt in to notifications.
• Technical data: authentication tokens (session cookies), and basic server logs.

3. How we use your data

• To provide and operate the TimeWiseHub service.
• To send transactional emails (account verification, password reset, billing receipts).
• To send push notifications if you have opted in.
• To process subscription payments via Stripe.
• To improve the product based on aggregate, anonymised usage patterns.

We do not sell your data to third parties.

4. Data storage and security

Your data is stored in Supabase (PostgreSQL), hosted on AWS infrastructure. All data is encrypted in transit (TLS) and at rest. Row-level security policies ensure users can only access their own data. The application is deployed on Vercel with HTTPS enforced.

5. Your rights (GDPR)

If you are in the EEA or UK, you have the right to:

• Access your data — use the "Download my data" button in Settings at any time.
• Rectification — update your profile in Settings.
• Erasure — contact us to request account deletion. All your data will be permanently removed within 30 days.
• Data portability — your data export (Settings → Download my data) is in machine-readable JSON format.
• Object to processing — contact us at the email above.

6. Third-party services

• Supabase — database, authentication, and file storage.
• Vercel — application hosting and CDN.
• Stripe — payment processing. Stripe's privacy policy applies to payment data.

7. Data retention

We retain your data for as long as your account is active. On account deletion, all personal data is removed within 30 days. Stripe retains billing records as required by financial regulations.

8. Cookies

We use essential session cookies for authentication. See our Cookie Policy for details.

9. Changes to this policy

We may update this policy from time to time. Material changes will be notified by email. Continued use of the service after changes constitutes acceptance.