Privacy Policy

Cookies, and what they’re for

We set no marketing cookies anywhere. No advertising trackers, no cross-site tracking, no fingerprinting, no session recording, and nothing that follows you off our sites.

In the app, signing in sets a session cookie. That is what keeps you logged in as you move between pages, and it also carries the token that protects your forms from being submitted by another site. It is strictly necessary — GoodTime cannot work without it — and it is cleared when you sign out.

On this marketing site, no cookies are set at all. It uses Plausible to count visits, which is cookieless, stores no personal data, and cannot follow you across sites. We see how many people read a page and roughly where in the world they were — not who they are.

There is no consent banner because there is nothing to consent to: a strictly necessary login cookie doesn’t require consent, and we set no other kind.

The analytics script is served from our own domain rather than a third party, so no request about your visit leaves goodtimehq.com. Our web server also keeps standard access logs (IP address, timestamp, page requested, browser) for security and debugging; those are not used to profile anyone.

What the app collects

When you use GoodTime itself, we hold what the product needs to function:

• Account information — your name, email address, and password (stored hashed, never in readable form).
• Your work data — the clients, projects, tasks, time entries, expenses, estimates, and invoices you create.
• Billing information — handled by a PCI-compliant payment processor. Card numbers never touch our servers. We keep a record of what you were charged, not how you paid it.

We don’t sell your data

Not to advertisers, not to data brokers, not as an “anonymised” aggregate. We share it only with the service providers GoodTime needs to run — payment processing, transactional email, hosting — each bound to handle it confidentially and only on our instructions. We will also disclose data if the law genuinely requires it, and we would tell you unless legally prevented.

If Software for Good is ever acquired or reorganised, your data may transfer as part of that business. It would remain subject to this policy.

Getting your data out, and deleting it

Every report in GoodTime exports to CSV, at any time, without asking us. Cancelling is self-serve in your account settings — no email, no phone call, no retention gauntlet. When you close your account we delete your data on a defined schedule; backups age out shortly after. Ask us to delete something sooner and we will.

Email

Service email — receipts, password resets, things breaking — comes with using the product and can’t be switched off. Anything else is opt-in, and every marketing message carries a working unsubscribe link.

Security, honestly stated

Data is encrypted in transit, passwords are hashed, and access to production is limited to the people who need it. No system is perfectly secure and we won’t pretend otherwise. If we ever have a breach affecting your data, we will tell you what happened and what we’re doing about it.

Do Not Track, and children

Plausible does not track individuals, so there is nothing here for a Do Not Track signal to switch off — no profile is built either way. GoodTime is a tool for businesses and is not directed at children. We don’t knowingly collect information from anyone under 13, and will delete it promptly if we discover we have.

Your rights

Wherever you are, you can ask us what we hold about you, correct it, export it, or have it deleted — email [email protected]. If you’re in California, the EU, or the UK you have specific statutory rights on top of that, and we honour them. We won’t charge you or treat you differently for exercising any of them.

Changes

When this policy changes materially we’ll date the new version and, for changes that affect how we handle your data, tell account holders directly rather than quietly reposting it.