Privacy and data

For members, managers and admins

This page answers the common questions about what ChronoTab does with your data. It is for every role. It is a short summary only — the binding policy is the maintained Privacy Policy on the marketing site: ChronoTab Privacy Policy.

What ChronoTab stores

• Your identity. The email and name from your Google or GitHub sign-in, and your GitHub login. ChronoTab never receives your password.
• Your time entries. The duration, work date, activity type, optional description, and the GitHub issue each entry belongs to. The issue is resolved by ChronoTab, not typed in by you.
• Your organisation’s data. Its name, its members and their roles, and the repositories it has allowed ChronoTab to read.
• The extension’s local state, on your own device only. The key the extension uses, your preferences, a small cache, and any entries queued while offline. Uninstalling the extension removes it.
• Access tokens for imports. If an org admin imports time from another tool, the access token they give ChronoTab is stored encrypted and deleted when the import finishes, or 30 days after it was last used if the admin chooses to keep it.

What ChronoTab does not store or do

• It does not read your source code, commits, comments or pull requests. The GitHub App can read the repository names and issue numbers and titles it needs to label entries, and nothing more.
• It never writes to GitHub. ChronoTab is read-only towards your repositories.
• It does not collect payment details or money amounts. ChronoTab is a timesheet tool, not a billing product.
• It does not read your browsing history, and it runs no advertising, tracking or third-party analytics scripts. The extension only activates on GitHub issue pages.

Who can see your time

Your entries are scoped to one organisation. Inside it, an org admin and a manager can see organisation-wide time, and a member sees only their own My week — the exact split is in Roles and permissions. Another organisation can never see your data: access from outside your organisation is refused as if the data did not exist.

Keeping and deleting data

• ChronoTab keeps your time entries for as long as your organisation keeps you as a member, plus a limited period for audit, backup and legal needs.
• The record is append-only for audit: editing or deleting an entry marks it as superseded or deleted rather than erasing the row. It is removed from every report, export and total straight away, and stays in your organisation’s records until the organisation is deleted. See Edit or delete an entry.
• When an admin removes you, or your organisation is deleted, your personal identity data is deleted or de-identified within a reasonable period, except where the law requires it to be kept.
• An org admin can delete the whole organisation from Settings. It is locked at once and its data is permanently deleted after a 30-day grace period; see Delete your organisation.
• To ask for access, export or deletion of your own data, contact support or your org admin — see Get help.

Note

This summary is here to help you understand the product. For the full, authoritative wording — including how data is shared with providers such as Cloudflare, GitHub and Google — read the ChronoTab Privacy Policy. If it and this page ever disagree, the policy wins; tell support so this page can be corrected.