Privacy Policy

1. Information We Collect

When you use MA Time, we may store information including:

• Your email address and account information
• Profile and workspace settings
• Time entries and absences
• Clients, projects, tags, and custom dynamic fields
• Report configuration and related work data
• Google Calendar connection and synchronization data when you choose to connect Google Calendar

2. How We Use Your Information

We use your information to:

• Provide time tracking and reporting functionality
• Maintain your account and workspace
• Generate reports and exports
• Synchronize calendar information you choose to connect
• Allow you to review calendar events and convert selected events into MA Time entries or absences
• Maintain application security and reliability

3. Google Calendar Data

MA Time requests read-only access to:

• Your Google Calendar list
• Events from calendars you choose to synchronize

MA Time does not create, modify, or delete Google Calendar events or calendars.

When Google Calendar is connected, MA Time may store:

• Calendar identifiers, names, and time zones
• Synchronization state
• Google event identifiers and revision metadata
• Event status
• Event start and end dates/times
• Event title
• Event description converted to normalized plain text

MA Time does not read or store attendees, organizer details, event locations, conference information, attachments, reminders, or extended properties.

MA Time does not store the complete raw Google Calendar API response.

MA Time’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Converting Google Events into MA Time Records

Google Calendar events are not automatically turned into work records.

You explicitly review and accept events before MA Time creates a Time Entry or Absence.

You may edit the proposed time, description, classification, client, project, tags, and other MA Time information before accepting it.

Creating a MA Time record does not modify the original Google Calendar event.

5. Google Authorization and Tokens

MA Time stores Google OAuth access and refresh tokens in encrypted form in order to maintain the Google Calendar connection.

These credentials are used only by the MA Time server when communicating with Google services.

6. Disconnecting Google Calendar

When you disconnect Google Calendar, MA Time attempts to revoke the Google authorization and clears the stored access token, refresh token, and token expiration information.

Disconnecting Google Calendar does not automatically delete:

• Previously synchronized calendar metadata
• Previously synchronized event records
• Review proposals
• Time Entries or Absences previously created from Google Calendar events

Previously created MA Time records remain part of your MA Time workspace.

7. Sharing of Information

MA Time does not sell your personal information.

Google Calendar event content is not sent to Resend for email delivery and is not used for advertising.

MA Time uses service providers required to operate the application, including:

• Vercel for application hosting and domain infrastructure
• Supabase for authentication and application data infrastructure
• Resend for transactional authentication email delivery
• Google for Google Calendar authorization and calendar access
• ImprovMX for forwarding email sent to support@matime.app

These providers may process information as necessary to provide their respective services.

8. Email Authentication

MA Time uses passwordless authentication.

Authentication emails, including sign-in links, may be delivered through Resend on behalf of MA Time.

Google Calendar event content is not included in these authentication emails.

9. Data Security

MA Time uses technical measures intended to protect stored information.

Google OAuth access and refresh tokens are encrypted before they are stored.

No method of electronic storage or transmission can be guaranteed to be completely secure.

10. Data Retention

MA Time retains application data as needed to provide the service and maintain your workspace.

Disconnecting an external integration does not necessarily delete records that were previously synchronized or created from that integration.

11. Your Choices

You may:

• Choose whether to connect Google Calendar
• Choose which calendars are synchronized
• Review events before creating MA Time records
• Disconnect Google Calendar
• Edit or delete MA Time records through the available application controls

12. Changes to This Privacy Policy

We may update this Privacy Policy as MA Time develops.

When changes are made, the "Last updated" date at the top of this page will be updated.

13. Contact

For questions about this Privacy Policy or your data, contact:

support@matime.app