Privacy Policy · Kaalam

This Privacy Policy explains how Kaalam ("Kaalam", "we", "us", or "our") collects, uses, and shares information when you use our time-tracking and approval service at https://kaalam.today (the "Service").

Information we collect

We collect the information needed to operate the Service:

Account and sign-in information. When you create an account or sign in, we receive your name, email address, and authentication identifiers from our identity provider, Clerk. If you choose "Continue with Google", Google shares basic profile information, such as your name, email address, and Google account identifier, with Clerk so we can create and secure your account.
Workspace and time-tracking data. You and other workspace members may provide workspace names, settings, currency, timezone, invitations, member roles, project details, project assignments, cost rates, bill rates, time entries, descriptions, billability choices, approval decisions, review notes, dashboard data, and report exports.
Messages and support requests. If you contact us, respond to an invitation, or ask for support, we collect the information you choose to provide and the information needed to respond.
Usage and technical data. We may collect device, browser, and log information needed to operate, secure, and improve the Service (for example, IP address, timestamps, and error logs).

How we use information

We use the information we collect to:

Provide, maintain, and improve the Service;
Create accounts, authenticate users, and secure sessions;
Operate workspaces, projects, assignments, time entries, approvals, and reports;
Enforce workspace roles, permissions, and access controls;
Send service-related communications, including workspace invitations;
Respond to support requests and troubleshoot issues;
Protect against fraud, abuse, and security incidents; and
Comply with legal obligations.

Google user data

If you sign in with Google, Kaalam accesses Google user data only as needed for authentication and account management. We use Google profile information, such as name and email, to identify you within the Service. We do not use Google user data for advertising, and we do not sell Google user data.

Kaalam's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we share information

We share information only in these circumstances:

Within workspaces. Workspace owners and members can see information according to their role and permissions. For example, workspace owners can review submitted time entries and reports in their workspace, while workers can see their own time entries, estimated income, and review notes. Personal Workspace data is not visible to Company Workspace owners through the Service.
Service providers. We use trusted processors to run the Service, including Clerk (authentication), Convex (application data storage and sync), and infrastructure providers. These providers process data on our behalf under contractual obligations.
At your direction. We share information when you take an action that requires it, such as inviting a member to a workspace or exporting a report.
Legal and safety. We may disclose information if required by law or to protect rights, safety, and security.

We do not sell your personal information.

Data retention

We retain account and workspace data while your account or workspace remains active and as needed to provide the Service, resolve disputes, enforce agreements, and comply with legal obligations. Workspaces may preserve historical time entries and reports so members can keep a record of reviewed work. You may request deletion of your account by contacting us.

Security

We use administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or restrict certain processing of your personal information. To make a request, contact us at [email protected].

You can disconnect Google sign-in from your Google Account security settings. Removing access may limit your ability to sign in with Google.

Children

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from children.

International transfers

We and our service providers may process information in countries other than where you live. We take steps designed to ensure appropriate safeguards where required by law.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above.

Contact us

Questions about this Privacy Policy or our data practices? Contact [email protected].