Privacy Policy
Last updated: April 2026
This policy explains what personal data Clockd collects, why we collect it, and how you can control it.
What we collect
- Account data: name, email, phone, firm details you provide during onboarding.
- Usage data: time entries, calls, matters, invoices, and notes you create. This is your firm's data and belongs to you.
- Device data: approximate location (derived from IP), browser and OS, and a stable device identifier so we can list your active sessions and detect suspicious sign-ins.
How we use it
To provide, secure, and improve Clockd. We do not sell your data. We do not share it with third parties for advertising.
Security
Data is encrypted in transit (TLS) and at rest. Access tokens live in encrypted httpOnly cookies that client-side scripts cannot read.
Retention
Active accounts retain data for as long as the account exists. Closed accounts are purged after 30 days, except where law requires longer retention (for example, tax records).
Your rights
You can export or delete your data from Settings, or by emailing privacy@clockd.app. We respond within 30 days.
Changes
Material changes to this policy will be announced in-app at least 30 days before they take effect.