Chronos Timekeeping — Privacy Policy

Effective Date: June 13, 2026 Last Updated: June 13, 2026

This Privacy Policy explains how Jordan P. Ehrig, Sr., sole proprietor doing business as Chronos Timekeeping ("we," "us," "our"), collects, uses, and shares information in connection with the Chronos Timekeeping software, website (chronos-timekeeping.com), and related services (the "Service"). It is part of, and incorporated into, the Terms of Service & EULA.

Stripe and other payment processors require a published privacy policy. Replace the bracketed placeholders and have this reviewed before going live.

1. Privacy-First, Local-First Design

Chronos is designed to keep your activity data on your own device. Time Data — including file-path metadata, window/process information, project classifications, timestamps, and durations — is stored locally in an encrypted database (AES-256-GCM) on your machine. We do not collect the contents of your files; Chronos records metadata (such as file paths and durations) used to classify time, not document contents.

2. Information We Collect

(a) Information you provide:

• Account and contact details (name, email) when you register, purchase, or contact support.
• Billing information processed by Stripe (see Section 4) — we do not receive or store your full payment-card number.
• Communications you send us (support requests, feedback).

(b) Information collected automatically:

• Local activity data (Time Data) generated on your device, stored locally as described above. This stays on your device unless you explicitly export, sync, or transmit it.
• Telemetry / diagnostic data — limited operational, crash, version, and feature-usage data, where enabled, used to maintain and improve the Service. You may be able to disable telemetry in settings where offered.
• Website data — standard log data (IP address, browser type, pages visited) and cookies or similar technologies used to operate the site and measure traffic.

(c) Information from third parties:

• Limited transaction and subscription status data from Stripe (e.g., whether a payment succeeded), not full card data.

3. How We Use Information

We use information to: (a) provide, operate, secure, and maintain the Service; (b) process payments and manage subscriptions; (c) provide support and respond to inquiries; (d) improve and develop features (including aggregated or de-identified analysis); (e) detect, prevent, and address fraud, abuse, security, and technical issues; and (f) comply with legal obligations and enforce our terms. We do not sell your personal information, and we do not use your local Time Data for advertising.

4. Payment Processing (Stripe)

Payments are processed by Stripe, Inc., an independent third-party processor. When you make a purchase, your payment details are collected and processed by Stripe under Stripe's own privacy policy and terms. We receive transaction metadata (such as confirmation, amount, and subscription status) but not your full card number. See https://stripe.com/privacy.

5. Monitored Persons — Customer as Controller

If you use Chronos to monitor, record, or classify the activity or files of any person other than yourself ("Monitored Persons" — e.g., employees or contractors), you are the data controller for that data, and you are responsible for providing required notices, obtaining required consents, and complying with all applicable monitoring, wiretap, employment, and privacy laws. We process such data, if at all, only as a service provider/processor acting on your instructions and on your behalf.

6. How We Share Information

We share information only: (a) with service providers who help us operate the Service (e.g., Stripe for payments, hosting and email providers), under confidentiality obligations; (b) to comply with law, legal process, or lawful government requests; (c) to protect our rights, safety, and property, or that of others, and to enforce our terms; and (d) in connection with a merger, acquisition, financing, or sale of assets, with notice as required by law. We do not sell or rent personal information.

7. Data Retention

We retain account and transaction information for as long as your account is active and as needed to provide the Service, comply with legal and tax obligations, resolve disputes, and enforce agreements. Local Time Data is retained on your device under your control and is deleted when you delete it or uninstall the Software (subject to your own backups).

8. Security

We use technical and organizational measures appropriate to the risk, including encryption of local Time Data (AES-256-GCM). However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your device, credentials, and backups.

9. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to opt out of certain processing, or to withdraw consent. To exercise these rights, contact legal@chronos-timekeeping.com. We will respond as required by applicable law and will not discriminate against you for exercising your rights.

• U.S. state privacy laws (e.g., California CCPA/CPRA and similar). We do not sell or "share" personal information for cross-context behavioral advertising. California residents may request access and deletion as provided by law.
• EU/UK (GDPR), where applicable. Our legal bases include performance of a contract, legitimate interests (operating and securing the Service), consent (where required, e.g., certain cookies/telemetry), and legal obligations. You may have rights to access, rectify, erase, restrict, object, and port, and to lodge a complaint with a supervisory authority.

10. Cookies

The website may use cookies and similar technologies for essential operation and analytics. You can control cookies through your browser settings; disabling some cookies may affect site functionality.

11. International Transfers

If you access the Service from outside the United States, you understand that your information may be processed in the United States and other countries with different data-protection laws, and you consent to such processing where permitted by law.

12. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us personal information, contact us and we will delete it.

13. Changes to This Policy

We may update this Policy from time to time. Material changes will be indicated by an updated "Last Updated" date and, where required, additional notice. Your continued use after changes take effect constitutes acceptance.

14. Contact

Privacy questions or requests: legal@chronos-timekeeping.com · https://chronos-timekeeping.com

This document is a template and is not legal advice. Have it reviewed by a licensed attorney familiar with U.S. (and, if you have such users, EU/UK) privacy law before publication.