Privacy Policy

1. Introduction

Hourly ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and Dutch privacy law (AVG).

2. Data Controller

The data controller is Coding Agency, located in the Netherlands. For privacy-related questions, you can reach us at hourly@nerdpower.nl.

3. Data We Collect

We collect the following personal data when you use Hourly:

• Account information: name, email address, and password (encrypted)
• Time tracking data: projects, time entries, descriptions, and hourly rates
• Usage data: login times, browser type, and IP address
• Communication data: feature requests and support messages

4. Purpose of Processing

We use your data for the following purposes:

• Providing and maintaining the Hourly service
• Authenticating your account and securing your data
• Sending service-related communications (e.g., password resets)
• Improving our service based on usage patterns and feedback

5. Legal Basis

We process your data based on: (a) your consent when you create an account and accept these terms, (b) necessity for the performance of our service contract with you, and (c) our legitimate interest in improving our service and maintaining security.

6. Data Storage & Security

Your data is stored securely on AWS infrastructure in the European Union (EU). We use industry-standard encryption for data in transit (TLS) and at rest. Passwords are hashed using bcrypt and are never stored in plain text.

7. Data Sharing

We do not sell, trade, or share your personal data with third parties. We only share data with service providers necessary to operate our service (e.g., AWS for hosting, email delivery services). These providers are bound by data processing agreements.

8. Data Retention

We retain your data for as long as your account is active. When you delete your account, all personal data will be permanently removed within 30 days. Anonymized usage statistics may be retained for analytical purposes.

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of your personal data
• Right to rectification — correct inaccurate personal data
• Right to erasure — request deletion of your personal data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing of your personal data
• Right to withdraw consent — withdraw your consent at any time

10. Cookies

Hourly uses only essential cookies necessary for the functioning of the service (session cookies, CSRF protection). We do not use tracking cookies, advertising cookies, or third-party analytics tools.

11. Contact

For privacy-related questions, data access requests, or to exercise any of your rights, please contact us at hourly@nerdpower.nl. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).