Privacy Policy

1. Purpose

This Privacy Policy explains how TimesheetFairy.ai ("TimesheetFairy," "we," "us," or "our") collects, uses, and protects your information. TimesheetFairy is an independent software application based in Minnesota that helps marketing and creative professionals automate time tracking and project documentation.

2. Information We Collect

We collect information to operate the Service effectively and provide you with the best experience possible.

• Account Information: Google ID, name, and email collected during sign-in.
• Billing Information: Payment details processed securely through Stripe.
• Usage Data: Log files and analytics to improve performance.
• Uploaded Files: Briefs, SOWs, and transcripts you choose to upload for AI processing.
• Calendar Data: With your consent, we access Google Calendar event information (including event titles, descriptions, start/end times, durations, and attendee lists) to help generate timesheet suggestions. We do not modify, delete, or create events.
• Cookies & Analytics: Basic session tracking for authentication and usage insights.

3. Google User Data and Permissions

Our application uses Google APIs to connect with your Google Calendar and basic account identity.

OAuth Scopes Requested

• https://www.googleapis.com/auth/calendar.readonly — Allows read-only access to your calendar events to analyze meeting details (including event titles, descriptions, start/end times, durations, and attendee lists) for timesheet automation.
• https://www.googleapis.com/auth/userinfo.email — Used only to identify your Google account and associate data with your TimesheetFairy user profile.

Access to Google Calendar Data

TimesheetFairy accesses your Google Calendar only after you explicitly grant permission during sign-in. This access is read-only and used solely to fetch event information for timesheet generation. The app never modifies, creates, or deletes any calendar events.

Use of Google Calendar Data

• Data retrieved from Google Calendar, such as event titles or descriptions, is used only within your private workspace to suggest draft timesheet entries.
• Certain Google Calendar event details (such as meeting titles or descriptions) may be temporarily processed by OpenAI's API to generate draft timesheet entries. This data is transmitted securely, not stored or logged by OpenAI, and is deleted immediately after processing. OpenAI acts as a data processor on behalf of TimesheetFairy.ai, and all transmissions occur over encrypted channels.

Storage of Google Calendar Data

Google Calendar event data is processed in-memory (RAM) to generate draft timesheet entries. This data is never written to disk or stored in any database. It is discarded from memory immediately after draft entries are generated and displayed to the user.

Sharing of Google Calendar Data

TimesheetFairy does not share any Google Calendar data with third parties other than the limited, secure API use described above for OpenAI. Data is used exclusively to provide the timesheet automation feature.

Google's Limited Use Policy

Our app's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. How We Use Data

We use information we collect to:

• Operate and improve the Service.
• Personalize your experience.
• Process subscriptions and send billing notifications.
• Respond to support requests.
• Ensure security and prevent fraud.
• Use calendar event data to match meetings with projects and suggest draft time logs (with your permission).

5. Data Storage & Security

Data is stored using Google Firebase (Firestore and Storage, U.S. data centers). All transmissions are encrypted in transit. Authentication is handled via Google OAuth. Payment data is processed only by Stripe and never stored by us. The Service is hosted on Google Cloud infrastructure via Firebase and Replit, ensuring encryption in transit and secure data isolation.

6. Sharing of Information

We do not sell your personal information. Limited data may be shared with trusted vendors who enable core functionality:

• Stripe – For payment processing.
• Google Cloud / Firebase – For hosting, authentication, and secure access to Google Calendar data (read-only).
• OpenAI LLC – Used to process certain Google Calendar event details (such as meeting titles or descriptions) for timesheet automation and to generate content based on user-uploaded files (SOWs, briefs, etc.). This data is transmitted securely, not stored or logged by OpenAI, and deleted immediately after processing.

7. International Access

If you access TimesheetFairy.ai from outside the United States, your information may be transferred to and processed in the U.S. By using the Service, you consent to this transfer.

8. User Rights

You have the right to:

• Request access to or deletion of your personal data.
• Withdraw consent or close your account at any time.
• Submit privacy-related requests to admin@timesheetfairy.ai.

9. Data Retention

We retain account and usage data for as long as your subscription is active or as required by law. When your account is deleted, associated data is removed within a reasonable timeframe.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect data from minors. If you believe a child has provided us information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically. Any updates will be posted on this page with a revised "Effective Date." Continued use of the Service after updates constitutes acceptance of the new Policy.

12. Contact

Privacy or data-related questions? Contact us at admin@timesheetfairy.ai.