Privacy Policy

1. Introduction

Sobojinski Solutions LLC ("we," "us," or "our") operates Work OS (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

We collect information you provide directly to us:

• Account information: name, email address, and password when you create an account.
• Client and schedule data: client names, hourly rates, availability, time entries, and schedule configurations you enter into the Service.
• Integration data: when you connect third-party services (Slack, Gmail, Notion, ClickUp, calendar feeds), we access data from those services as authorized by you to provide our features.
• Payment information: billing details are processed by Stripe. We do not store your credit card numbers.
• Communications: support tickets, feedback, and other messages you send us.

We automatically collect:

• Usage data: pages visited, features used, and interactions with the Service.
• Device information: browser type, operating system, and IP address.

3. How We Use Your Information

• Provide, maintain, and improve the Service.
• Generate schedules, track time, and deliver features you request.
• Process payments and manage your subscription.
• Send transactional emails (password resets, account notifications).
• Respond to your support requests and feedback.
• Detect, prevent, and address technical issues or abuse.

4. Third-Party Integrations

When you connect third-party services (Slack, Gmail, Notion, ClickUp, or calendar feeds), we access only the data necessary to provide the features you enable. Integration tokens are encrypted at rest. You can disconnect integrations at any time from your Settings page, which revokes our access.

5. Data Sharing

We do not sell your personal information. We may share your information only in these circumstances:

• Service providers: Stripe (payments), Resend (transactional email), and hosting providers that help us operate the Service.
• Legal requirements: when required by law, regulation, or legal process.
• Business transfers: in connection with a merger, acquisition, or sale of assets.

6. Data Security

We implement industry-standard security measures to protect your data. Passwords are hashed using bcrypt. Integration tokens are encrypted at rest. Authentication uses secure JWT tokens. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

8. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate information in your account.
• Delete your account and associated data.
• Export your data (available via CSV export on Pro and Business plans).
• Withdraw consent for optional data processing.

To exercise these rights, contact us at the email below.

9. Cookies

We use essential cookies required for authentication and session management. We do not use third-party advertising cookies or cross-site tracking cookies.

10. Children's Privacy

The Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at: support@mytime.day