Privacy Policy

Effective Date: January 2026

This Privacy Policy explains how hrglass (“we,” “our,” or “us”) collects, uses, stores, and protects information when you use our project management software and related services (the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

We collect information to provide, operate, and improve our Service.

a. Account & Identity Information

When you create an account, we may collect:

Full name

Email address

Company or organization name

Profile photo

Phone number

Job title

Any other information you voluntarily provide in your profile

b. Project & Business Data

Our Service allows users to create, upload, and manage content, including but not limited to:

Projects, tasks, and time entries

Notes, comments, and internal communications

File uploads such as documents, images, contracts, and PDFs

Invoices, estimates, expenses, and billing-related records

Client and contact information

Custom fields, metadata, and configuration data

This data is stored and processed solely to provide the functionality of the Service.

c. Client & Third-Party Data

Users may store information about their own clients or end-customers, which may include:

Names

Email addresses

Physical addresses

Notes and communications

Contracts and sensitive business information

Users are responsible for ensuring they have the legal right to store and process this information using our Service.

d. Financial & Billing Information

Payments are processed through Stripe, a third-party payment processor.

We do not store credit card numbers or full payment details.

Stripe handles payment information in accordance with their own privacy and security policies.

We may store limited billing-related data such as subscription status, plan type, and transaction identifiers.

e. Usage & Technical Data

We automatically collect certain technical and usage information, including:

IP address

Device type, browser type, and operating system

Log files and error reports

Feature usage and interaction data

Performance and diagnostic data

Session recordings or analytics data (via approved analytics tools)

This information helps us maintain security, improve performance, and enhance user experience.

2. Cookies & Tracking Technologies

We use cookies and similar technologies to:

Authenticate users and manage sessions

Remember preferences and settings

Analyze usage and performance

Support marketing and advertising efforts

Users may be able to manage or disable non-essential cookies through browser settings or cookie preference tools, where available.

3. How We Use Information

We use collected information to:

Provide, operate, and maintain the Service

Authenticate users and secure accounts

Process subscriptions and payments

Communicate with users about updates, support, and service-related notices

Improve features, usability, and performance

Monitor usage, detect abuse, and prevent fraud

Comply with legal and regulatory obligations

4. Data Sharing & Disclosure

We do not sell user data.

We may share data only in the following limited circumstances:

Service Providers: Trusted third-party vendors for analytics and customer support

Legal Compliance: When required to comply with laws, regulations, or legal requests

Security & Protection: To protect the rights, property, or safety of our users or the Service

All third-party service providers are required to safeguard data and use it only for authorized purposes.

5. Data Security

We take data security seriously and implement industry-standard safeguards, including:

HTTPS / TLS encryption in transit

Encryption of data at rest

Role-based access controls

Administrative audit logging

Regular data backups

Restricted internal access on a need-to-know basis

While no system can be guaranteed 100% secure, we continually work to protect user data.

6. Data Retention

User data is retained for as long as an account is active.

When an account is deleted, associated data is retained for 30 days before permanent deletion.

Some information may be retained longer where required for legal, compliance, or backup purposes.

7. User Rights & Choices

Users have the right to:

Edit or update their account and project data

Delete content within the Service

Delete their account entirely

Upon account deletion, data will be handled in accordance with our retention policy.

8. International Data Transfers

Your information may be processed and stored in locations where our infrastructure or service providers operate. We take steps to ensure appropriate safeguards are in place when data is transferred internationally.

9. Children’s Privacy

The Service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. Continued use of the Service constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or how your data is handled, please contact us at:

Support (link)