Privacy Policy

1. Controller

Hubora GmbH (registered in Austria)
Contact: support@timebeacon.app

2. What Data We Collect

TimeBeacon processes the following data from your monday.com account in order to provide its time tracking functionality:

• monday.com User-IDs and display names
• Board-IDs associated with the installed Board View
• Time tracking entries (hours logged per user, project, and date)
• OAuth tokens required for API access (encrypted with AES-256-GCM at rest)

We do not collect any data beyond what is necessary for the service to function.

3. Cookies

TimeBeacon operates as an iframe-based Board View within monday.com and does not set or use any cookies.

4. Data Storage & Security

All data is stored on servers operated by Hetzner Online GmbH, located in Germany. OAuth tokens are encrypted using AES-256-GCM. Access to the server is restricted and secured via SSH.

5. Third-Party Services

• monday.com API — Core functionality. TimeBeacon reads and writes time tracking data through the monday.com API on behalf of the authenticated user.
• Resend — Used to send optional email reports (e.g., weekly summaries). Only the recipient email address and report content are transmitted.

6. Data Retention & Deletion

When TimeBeacon is uninstalled from a monday.com account, all associated data is automatically deleted within 10 days. Deletion is triggered by a webhook from monday.com and requires no action from the user.

You may also request early deletion at any time by contacting support@timebeacon.app.

7. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data
• Restriction — request restricted processing of your data
• Data portability — receive your data in a structured, machine-readable format
• Objection — object to data processing based on legitimate interests

To exercise any of these rights, contact support@timebeacon.app.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the app or via email. Continued use of the service after changes constitutes acceptance.