Security & data
How access is managed and where your data is stored.
Access
Services use HTTPS. Time uses authentication and roles to limit access to personal and organization data.
Storage
Data is stored in OnlineCenter’s database. Access is limited to the people who need it to operate the service.
Backups
The PostgreSQL database is backed up. The restoration procedure has been tested outside the production environment.
Deletion and retention
Voluntary account deletion immediately deactivates the account. Identity and personal data deletion starts without a thirty-day grace period and is retried after failures. If you leave an organization that must continue operating, another active owner must remain; if you are the last owner, first transfer ownership. You can also close the organization from Time without inviting a new owner, after its subscription has effectively ended. After the effective end of the subscription, authorized users have 90 days to read and export the Time data of the organization that remains accessible. At the deadline, access ends and the retention process deletes the relevant data. Acceptance evidence, accounting records, other logs and backups follow separate rules.
Report an issue
To report a security or data issue, contact support@onlinecenter.be.