Privacy Policy · Kaalam

This Privacy Policy explains how Kaalam ("Kaalam", "we", "us", or "our") collects, uses, and shares information when you use our time-tracking, approval, and invoicing service at https://kaalam.today (the "Service").

Information we collect

We collect the information needed to operate the Service:

Account and sign-in information. When you create an account or sign in, we receive your name, email address, and authentication identifiers from our identity provider, Clerk. If you choose "Continue with Google", Google shares basic profile information, such as your name, email address, and Google account identifier, with Clerk so we can create and secure your account.
Workspace and time-tracking data. You and other workspace members may provide workspace names, settings, currency, timezone, invitations, member roles, project details, project assignments, cost rates, bill rates, time entries, descriptions, billability choices, approval decisions, review notes, dashboard data, and report exports.
Billing and invoice data. Workspace owners and workers may provide billing profile identities, addresses, contact details, payment instructions, customer details, invoice terms, source selections, payment records, and correction reasons. We store issued invoice and credit-note snapshots, audit events, and their exact generated PDF files.
Messages and support requests. If you contact us, respond to an invitation, or ask for support, we collect the information you choose to provide and the information needed to respond.
Usage and technical data. We may collect device, browser, and log information needed to operate, secure, and improve the Service (for example, IP address, timestamps, and error logs).

How we use information

We use the information we collect to:

Provide, maintain, and improve the Service;
Create accounts, authenticate users, and secure sessions;
Operate workspaces, projects, assignments, time entries, approvals, reports, invoices, credit notes, and payment-status records;
Enforce workspace roles, permissions, and access controls;
Send service-related communications, including workspace invitations;
Respond to support requests and troubleshoot issues;
Protect against fraud, abuse, and security incidents; and
Comply with legal obligations.

Google user data

If you sign in with Google, Kaalam accesses Google user data only as needed for authentication and account management. We use Google profile information, such as name and email, to identify you within the Service. We do not use Google user data for advertising, and we do not sell Google user data.

Kaalam's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we share information

We share information only in these circumstances:

Within workspaces. Workspace owners and members can see information according to their role and permissions. For example, workspace owners can review submitted time entries, customer invoices, and worker-payable records in their workspace, while workers can see their own time entries, estimated income, worker invoices, and review notes. Customer invoice details and preserved bill rates are not disclosed through worker invoice views. Personal Workspace data is not visible to Company Workspace owners through the Service.
Service providers. We use trusted processors to run the Service, including Clerk (authentication), Convex (application data storage and sync), and infrastructure providers. These providers process data on our behalf under contractual obligations.
At your direction. We share information when you take an action that requires it, such as inviting a member to a workspace or exporting a report.
Legal and safety. We may disclose information if required by law or to protect rights, safety, and security.

We do not sell your personal information.

Data retention

We retain account and workspace data while your account or workspace remains active and as needed to provide the Service, resolve disputes, enforce agreements, and comply with legal obligations. Workspaces may preserve historical time entries, reports, billing profiles, invoice snapshots, audit events, and exact issued PDFs so authorized people can keep an accurate commercial record. Issued invoices and credit notes are designed to remain immutable and may be retained after a workspace is archived or a member leaves. A deletion request may therefore be limited where retention is needed for another user's records, legal obligations, security, fraud prevention, or dispute resolution. You may request deletion of your account by contacting us.

Security

We use administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or restrict certain processing of your personal information. To make a request, contact us at [email protected].

You can disconnect Google sign-in from your Google Account security settings. Removing access may limit your ability to sign in with Google.

Children

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from children.

International transfers

We and our service providers may process information in countries other than where you live. We take steps designed to ensure appropriate safeguards where required by law.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above.

Contact us

Questions about this Privacy Policy or our data practices? Contact [email protected].