Privacy policy
How we use and protect your data.
Version dated 6 October 2026
Controller
KL Digital SRL is the controller for accounts, billing, support, security and individual Time. For Time Team data entrusted by an organization, the organization determines the purposes and KL Digital processes the data on its instructions to provide the service.
Data processed
Depending on the service, we process account information, time and timesheet data, organization information, billing information sent by Stripe, technical security data and support messages.
Why
This data is used to provide the requested service, manage access, process subscriptions, maintain security and answer support requests. With your consent, Google Analytics measures public commercial pages and, if enabled with separate consent within Time, Time pages and features. Events use fixed categories; descriptions, notes, names and email addresses are not sent.
Recipients
Data is available to authorized people and providers required for the service. See the list of subprocessors on the site.
Retention
Personal Time data is retained until account deletion. Organization Time data follows the 90-day period after the effective end of the subscription. Invoices, contractual evidence, logs and backups serve separate purposes; their retention does not extend access to hours. The target policy specifies 24 months after resolution for ordinary support, 30 days for technical logs and 7 days for debug, 14 days for local backups and 35 days for the relevant S3 copies. These target periods are not all enforced yet: shared scopes and deletion mechanisms must be verified. Metrics and alert history are configured for 15 and 5 days. Accounting archives and contractual evidence are excluded from these operational periods. Voluntary account deletion immediately deactivates the account. Identity and personal data deletion starts without a thirty-day grace period and is retried after failures. If you leave an organization that must continue operating, another active owner must remain; if you are the last owner, first transfer ownership. You can also close the organization from Time without inviting a new owner, after its subscription has effectively ended. After the effective end of the subscription, authorized users have 90 days to read and export the Time data of the organization that remains accessible. At the deadline, access ends and the retention process deletes the relevant data. Acceptance evidence, accounting records, other logs and backups follow separate rules.
Your rights
You may request access, correction, deletion or restriction by writing to support@onlinecenter.be. You may also lodge a complaint with the Belgian Data Protection Authority.