AbleTime Limited – Privacy Policy

Last updated: 14 November 2025

1. Introduction

AbleTime Limited ("we", "us", "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, and protect your information when you use our time tracking service.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

AbleTime Limited is the data controller for personal data collected through our website and service interactions. For personal data contained in your time tracking content, you are the data controller and we act as the data processor.

3. Personal Data We Collect

3.1 Account Data

When you create an account, we keep a record of:

• Email address
• Name and contact information
• Account preferences and settings
• Authentication credentials (securely hashed)

3.2 Usage Data

Technical information is collected when you use our service:

• IP address and device information
• Browser type and version
• Pages visited and features used
• Error logs and performance data

3.3 Your Content

You retain full ownership of all content you create within our service. We process this content solely to provide our service and do not use it for any other purpose.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance – To provide our time tracking service
• Legitimate Interest – To improve our service and ensure security
• Consent – For optional features and communications
• Legal Obligation – To comply with applicable laws

5. How We Use Your Data

5.1 Service Provision

We use your data to:

• Provide and maintain our time tracking service
• Process your time entries and generate reports
• Manage your account and subscriptions
• Provide customer support

5.2 Service Improvement

We may use aggregated, anonymized data to:

• Improve our service functionality
• Identify and fix technical issues
• Develop new features
• Analyze usage patterns

5.3 Your Content Ownership

Your time tracking data and content remain your exclusive property. We do not:

• Use your content for marketing purposes
• Share your content with third parties
• Analyze your content for commercial gain
• Use your content to train AI models

We only process your content to provide our service and ensure system functionality. Any additional use of your content is strictly opt-in and requires your explicit consent.

6. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data. We may share data only in these limited circumstances:

• Service Providers – With trusted partners who help us provide our service (hosting, payment processing)
• Legal Requirements – When required by law or to protect our rights
• Business Transfers – In connection with a merger or acquisition (with appropriate safeguards)

All third-party processors are bound by strict data protection agreements.

6.1 Payments – Stripe

We use Stripe to process payments. When you initiate or manage payments, Stripe may collect and process certain data directly as an independent controller for fraud prevention and security, including device identifiers, network and browser information, and telemetry necessary to detect and prevent abusive activity. This may include calls to Stripe telemetry endpoints (for example, https://m.stripe.com).

• Data shared: payment method details, billing information you provide, and technical signals used for fraud prevention.
• Purpose: payment processing, fraud detection, security, and compliance.
• Legal bases: contract performance and our legitimate interests in preventing fraud; Stripe may rely on legitimate interests and legal obligations.

For further details, see Stripe's privacy documentation.

6.2 Third-Party Integrations

Our service may offer integrations with third-party applications and services (such as project management tools, calendar applications, or accounting software). When you choose to use these integrations:

• You control which integrations to enable; in turn we share only the minimum set of data that is required to provide the service
• Data shared through integrations is subject to the third party's privacy policy and terms of service
• We do not control how third parties use your data once it is shared
• You can disable integrations at any time through your account settings
• We recommend reviewing the privacy policies of third-party services before enabling integrations

We are not responsible for the privacy practices or data handling of third-party services you choose to integrate with.

7. Data Security

We implement comprehensive security measures to protect your data:

• Encryption in transit and at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication
• Secure data centers in the European Economic Area
• Regular backups and disaster recovery procedures

8. Data Retention

We retain your data only as long as necessary:

• Account Data – For the duration of your account plus 30 days
• Usage Data – For 12 months for service improvement
• Your Content – For the duration of your account plus 30 days
• Legal Records – As required by applicable law

You may request deletion of your data at any time.

9. Your Rights

Under GDPR, you have the following rights:

• Access – Request a copy of your personal data
• Rectification – Correct inaccurate data
• Erasure – Request deletion of your data
• Portability – Receive your data in a structured format
• Restriction – Limit how we process your data
• Objection – Object to certain processing activities
• Withdraw Consent – Withdraw consent for optional processing

To exercise these rights, contact us at privacy@AbleTime.com.

10. Cookies and Tracking

We use essential cookies to provide our service and optional cookies for analytics. You can control cookie preferences through your browser settings.

We do not use tracking technologies for advertising or profiling purposes.

11. International Data Transfers

Your data is processed within the European Economic Area. If we need to transfer data outside the EEA, we ensure adequate protection through:

• Standard contractual clauses
• Adequacy decisions
• Other appropriate safeguards

12. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal data from children under 16. If we become aware of such data, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through our service. Continued use of our service after changes constitutes acceptance of the updated policy.

14. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact us:

15. Supervisory Authority

You have the right to lodge a complaint with the Irish Data Protection Commission or your local supervisory authority if you believe we have not addressed your concerns adequately.

We are committed to protecting your privacy and ensuring transparency in how we handle your data.