Privacy Policy
Effective: March 9, 2026
1. Who We Are
Personal Time Tracker is operated by Zaks.io LLC, a California limited liability company. For privacy inquiries, contact privacy@zaks.io.
2. What Data We Collect
When you use the Service, we collect:
- Activity data — file paths, project names, repository names, branch names, language types, editor/browser names, and timestamps sent by your extensions
- Duration data — calculated time spent on each file, project, and category
- Account data — email address, name, and authentication tokens provided during sign-in via Auth0
- Device metadata — user agent strings, operating system, and machine hostname included in heartbeat requests
3. How We Use Your Data
- Display your activity in dashboards and trend reports
- Generate summaries and insights accessible through the MCP interface
- Authenticate your identity and secure your account
We do not use your data for advertising, profiling, or any purpose beyond operating the Service.
4. Data Storage and Security
Activity data is stored in Convex Cloud. Authentication is handled by Auth0. Both providers maintain their own security practices and certifications. We use HTTPS for all data in transit and API key authentication for ingest endpoints.
5. Data Sharing
We do not sell, rent, or share your personal data with third parties. Data is only shared with infrastructure providers (Convex, Auth0) as necessary to operate the Service.
6. Data Retention
We retain your activity data for as long as your account is active. You may request deletion of your data at any time by contacting us. Upon account termination, data will be deleted within 30 days.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Object to or restrict processing of your data
California residents have additional rights under the CCPA. European residents have additional rights under the GDPR. To exercise any of these rights, contact privacy@zaks.io.
8. Cookies and Tracking
The Service uses session cookies for authentication (set by Auth0). We do not use analytics cookies, advertising trackers, or third-party tracking scripts.
9. Third-Party Services
- Auth0 — handles authentication. See Auth0 Privacy Policy.
- Convex — database and backend. See Convex Privacy Policy.
10. Changes to This Policy
We may update this policy at any time. Material changes will be noted by updating the effective date above. Continued use of the Service after changes constitutes acceptance.
11. Contact
For privacy-related questions or data requests, contact privacy@zaks.io.