Privacy Policy

Information We Collect

When you use HourSlip, we collect information you provide directly:

• Account info: Full name, email address (via Google OAuth or email/password).
• Business info: Trade name, GSTIN, PAN number, state code, address.
• Payment info: UPI ID, bank account number (masked), IFSC code. We do not store credit/debit card details — Razorpay handles payment processing.
• Client data: Client names, GSTINs, contact details, billing rates.
• Financial data: Time entries, invoices, expenses, platform income entries.

How We Use Your Data

• To provide the HourSlip service (time tracking, invoicing, tax planning).
• To generate invoices, PDFs, and GSTR-1 exports on your behalf.
• To calculate tax estimates and display financial analytics.
• To process subscription payments via Razorpay.
• To send transactional emails (invoice receipts, payment confirmations).

Data Storage & Security

Your data is stored securely in Supabase (PostgreSQL) hosted in the ap-south-1 (Mumbai) region. All data is encrypted in transit (TLS) and at rest. Row Level Security (RLS) ensures you can only access your own data. We do not have access to your data unless you explicitly share it for support purposes.

Third-Party Services

• Supabase: Database and authentication. Privacy Policy
• Razorpay: Payment processing. Privacy Policy
• Google OAuth: Optional sign-in method. Privacy Policy
• open.er-api.com: Live USD/INR exchange rates (no personal data sent).
• IFSC API (Razorpay): Bank branch lookup from IFSC code (no personal data sent).

Cookies & Local Storage

HourSlip uses:

• Authentication cookies: To keep you logged in (managed by Supabase Auth).
• localStorage: To cache forex rates (1-hour TTL), timer state, and UI preferences. No tracking cookies are used.

Data Retention

Your data is retained as long as your account is active. When you delete your account (Settings → Danger Zone), all data is permanently deleted, including time entries, invoices, clients, expenses, and income entries. This action is irreversible.

Your Rights

• Access: You can view all your data within the app at any time.
• Export: You can export invoices as PDF and GSTR-1 data as CSV.
• Delete: You can delete your account and all associated data from Settings.
• Correction: You can update your personal and business information from Settings.

Children's Privacy

HourSlip is not intended for users under 18 years of age. We do not knowingly collect information from minors.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or in-app notification. Continued use of HourSlip constitutes acceptance of the updated policy.