Privacy Policy

1. Who we are

ProjectTime is a project time-tracking service operated by Klensec Technology LLC, a company formed in the Commonwealth of Virginia, United States ("Klensec Technology", "we", "us", "our"). ProjectTime is powered by KlensClock. This policy covers the ProjectTime service and the website at us.klensclock.com.

2. Controller and processor

ProjectTime is sold to organizations ("customers") whose staff record their hours in it.

• For the timekeeping data a customer's staff enter (hours, charge codes, approvals, signatures, change history, leave), the customer is the controller and Klensec Technology is a service provider / processor acting on the customer's instructions. If you are an employee of a ProjectTime customer and want to access or correct your timekeeping data, please contact your employer.
• For account, billing and website data (the account you create, payments, and your visits to us.klensclock.com), Klensec Technology is the controller.

3. What we collect

Account and contact data

• Name, work email, company name, and phone number of the people who set up or administer an account.

Timekeeping data (on behalf of the customer)

• Employee names and work identifiers, hours worked, charge and job codes, approvals, electronic signatures, the reason and history of any change, and leave records.

Payment data

• Subscriptions are billed through Stripe. Stripe collects and processes card details; we do not store full card numbers. We keep a record of the plan, seats, amounts and invoices.

Sign-in and identity data

• When a customer connects its identity provider (for example Microsoft Entra ID, Google Workspace or Okta) for single sign-on, we receive and keep the directory identifiers, names and email addresses needed to sign users in and keep accounts in sync — at the customer's direction.

Technical and usage data

• IP address and approximate location (city/region), device and browser type, pages viewed, referring URL, timestamps, and security logs.

4. How we use it

• To provide and operate ProjectTime, authenticate users, and keep accounts in sync;
• To bill the subscription and send invoices and service notices;
• To provide support and respond to requests;
• To secure the service, prevent and investigate fraud or abuse, and keep audit and change records;
• To comply with our legal and tax obligations.

We do not sell personal information, and we do not use customer timekeeping data for advertising.

5. Who we share it with

We share personal data only with:

• Payment processor — Stripe, to take card payments and manage the subscription.
• Cloud hosting — Amazon Web Services (AWS), which hosts the service in the United States (see Section 7).
• Your identity provider — only to authenticate your users and sync directory data, at the customer's direction.
• Professional advisers — our lawyers, auditors and accountants, under confidentiality.
• Government and law enforcement — where we are legally required to do so.

Each service provider acts under a written agreement limiting them to the services they provide to us.

6. Cookies and analytics

The ProjectTime application uses strictly necessary cookies only — to keep you signed in and to keep the service secure. These do not require consent.

On our public marketing pages, if we use advertising-measurement tools (for example Google Ads conversion measurement) to see how well our ads perform, those are off by default and set only if you choose "Accept" on our cookie banner. If you choose "Decline", no advertising cookies are set; the provider may still receive limited cookieless signals used only for aggregated measurement. You can change your choice at any time.

7. Where it is hosted

8. How long we keep it

• Timekeeping records and their change history — kept for the life of the account and for 7 years after it closes, to meet US recordkeeping rules (for example the Fair Labor Standards Act, and the 3-years-after-final-payment rule for US federal contracts).
• Account and billing records — kept for the life of the account and as long as needed for tax and legal purposes.
• Website and security logs — up to 90 days.

After these periods we securely delete or anonymize the data unless the law requires us to keep it longer.

9. How we protect it

• Encryption in transit (HTTPS/TLS) and at rest;
• Access controls — staff access data only on a need-to-know basis;
• Encrypted, separate-region backups and incident-response procedures;
• Confidentiality obligations on all staff and service providers.

10. Your choices and rights

Depending on where you live and your relationship with us, you may ask us to access, correct, or delete your personal data, subject to the records we must keep by law (see Section 8). If you are an employee of a ProjectTime customer, your employer controls your timekeeping data, so please direct those requests to your employer; we will help the employer respond.

11. US state privacy rights

Residents of California and other US states with privacy laws may have the right to know what personal information we hold, to request access, correction or deletion, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under these laws, and we do not discriminate against anyone for exercising their rights. To make a request, use the contact details in Section 14.

12. Children

ProjectTime is a workplace service intended for adults. We do not knowingly collect personal data from children under 18. If you believe we hold a child's data, contact us and we will delete it.

13. Changes

We may update this policy from time to time. The effective date above shows when it last changed, and we will post material changes on this page.

14. Contact us

Klensec Technology LLC (Virginia, USA)
Email: support@klensec.com
Phone: +1 571 208 2859