Privacy Policy

1. Who We Are

AgiloBee is a time tracking and employee management SaaS platform operated for small and medium-sized businesses. Contact us at yes@agilobee.com for any privacy-related inquiries.

2. What Data We Collect

We collect only the data necessary to provide the AgiloBee service:

• Account data: Company name, administrator name, email address, and hashed password.
• Employee data: Name, work email, and role — provided by the company administrator.
• Time tracking data: Check-in and check-out timestamps, location, and work task descriptions submitted by employees.
• Usage data: Browser type, IP address, and session data for security and service improvement.
• Payment data: Processed securely via Stripe. We do not store full card numbers on our servers.

3. How We Use Your Data

• To provide and operate the AgiloBee time tracking and reporting service.
• To generate AI-powered daily summaries from employee work descriptions.
• To process subscription payments and send transactional emails.
• To maintain security, prevent fraud, and comply with legal obligations.

4. Data Isolation & Security

Each company's data is completely isolated. No company can access another company's data under any circumstances. All data is encrypted in transit (TLS) and at rest. Access to data is restricted to authenticated users within the same company account.

5. Data Retention

We retain your data for as long as your account is active. Upon account deletion, personal data is removed within 30 days. Time tracking records may be retained for a shorter period as required by applicable labor law.

6. Your Rights Under GDPR

• Right of access: Request a copy of all personal data we hold about you.
• Right to rectification: Correct inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data.
• Right to data portability: Export your data in a machine-readable format.
• Right to object: Object to processing based on legitimate interests.

To exercise any of these rights, contact us at yes@agilobee.com.

7. Third-Party Services

We use the following third-party processors, each with their own privacy policies:

• Stripe — Payment processing (stripe.com/privacy)
• Railway — Hosting and database
• Anthropic Claude — AI report generation (anthropic.com/privacy)
• Brevo/SMTP — Transactional email delivery

8. Analytics, Cookies and Your Choice

We use Google Analytics 4 (provided by Google Ireland Limited) to understand how visitors use AgiloBee and to measure our marketing. Analytics and campaign tracking are off by default. Only after you click Accept in the cookie banner do we load Google Analytics and set its cookies (_ga and _ga_<ID>, which Google sets for up to 2 years) and store our own attribution cookies (ab_first_touch and ab_last_touch, plus a copy in your browser's local storage) for 90 days. If you click Reject or do not answer, none of these are loaded or stored. Until you choose, the campaign parameters in the link you arrived through (for example utm_source) are kept only in your browser's memory for that page and are discarded when you leave it.

With your consent, Google Analytics receives a pseudonymous identifier stored in the cookie, the pages you view, events such as viewing pricing, clicking a sign-up button, signing up or starting a trial, device and browser information, the referring page, and an approximate location derived from your IP address. Our attribution cookies hold the campaign parameters of your first visit and of your latest campaign visit, the page you landed on and the site that referred you. When you sign up after accepting, we copy those values and your Google Analytics client ID into your company record, so that we know which channel brought the customer and can report sign-up and trial events to Google Analytics from our server. If you did not accept, none of this is saved at sign-up; we only record that you declined. We do not send names, email addresses or payment details to Google Analytics. Google processes this data under its own data processing terms, which rely on the EU-US Data Privacy Framework and standard contractual clauses. We keep Google Analytics data for 14 months; values copied to your company record are kept while your account exists, and you can ask us to delete them at any time.

Your decision is stored in the ab_consent cookie for 12 months. You can change or withdraw it at any time with the "Cookie settings" link in the page footer. Withdrawing consent stops further analytics collection and deletes our attribution cookies and their local-storage copies, as well as the Google Analytics cookies (_ga and _ga_<ID>) for this site; it does not affect processing carried out before you withdrew. You can also delete cookies in your browser settings. Questions or deletion requests: yes@agilobee.com.

9. Contact

For privacy inquiries: yes@agilobee.com