Privacy Policy

This policy explains what personal data the Abejora time-tracking service ("the Service") collects, why, and your rights over it. We act as data controller for account data, and as processor for the content you record in your workspace. The processing terms that go with that role are in the Data processing section of the Terms of Service.

Who is responsible

• Abejit BV, a company incorporated in Belgium, trading as Abejora.
• Registered office: Boeimeerstraat 19, 2820 Bonheiden, Belgium.
• Company and VAT number: BE 0704.662.834.
• Email: [email protected]
• Website: https://www.abejora.com

Privacy questions and requests go to [email protected], the one published address for legal, privacy and support.

What we collect

• Account data: your email address, authentication data, and your acceptance of these terms (time and version).
• Workspace content: the clients, projects, tasks, time entries and rates you enter.
• Billing data: subscription status and identifiers held by our payment provider (we do not store card numbers).
• Technical data: logs and IP addresses needed to operate and secure the Service.
• Enquiries: the email address and message you send us through the contact form. These reach us as an email and are not stored in the Service.

Why we use it

To provide the Service, authenticate you, process subscriptions, secure the platform against abuse, and meet legal obligations. We do not sell your personal data, and we do not use it to train models.

Cookies

We set no advertising cookies and no tracking cookies, and we ask for no cookie consent because we set nothing that requires it.

• The application at app.abejora.com sets one strictly necessary session cookie. It keeps you signed in and protects forms against cross-site request forgery. Without it the application cannot work.
• The public website at www.abejora.com sets no cookie on the home page, the pricing page, or these legal pages. The contact page sets the same strictly necessary session cookie, because the form needs it for cross-site request forgery protection.
• Where we measure traffic to the public website we use Plausible, which sets no cookies, stores nothing on your device, and does not follow you across sites.

Sub-processors

We rely on a small number of providers to run the Service:

• Hetzner: hosting and infrastructure, in the EU.
• Cloudflare: DNS, and the tunnel through which the Service is reached.
• Scaleway: transactional email, and object storage for the database backups, in the EU.
• Stripe: payments, acting as merchant of record for subscriptions.
• Plausible: website analytics for the public site, cookieless.

We announce an addition or a replacement by email before it takes effect, so that a customer who objects can terminate before that date.

Where data is stored

Account and workspace data are stored on servers in the EU. Where a provider processes data elsewhere, we rely on appropriate safeguards.

Retention

We keep workspace data while your account is active. On deletion we remove your data, except records we must keep to meet legal and accounting obligations: Belgian accounting law requires us to retain accounting records, including records of what was billed to you, for seven years.

Deletion applies to the live service immediately. A deleted workspace also survives in the database backups until they age out of the backup retention window, which is currently 30 days, after which it is gone from those too. We do not read a backup to serve anyone, only to restore the service.

Your rights

You can request access to, export of, or deletion of your data (including your account and workspace) from the Account section of your workspace Settings. We action requests manually and reply within 30 days.

• Access and export your data.
• Correct or delete your data, including your account and workspace.
• Object to or restrict certain processing, and lodge a complaint with your supervisory authority.

Our lead supervisory authority is the Belgian Data Protection Authority. You may also complain to the authority of the EU country where you live.

Contact

Privacy questions or requests: [email protected].