Privacy Policy

consultrack is a personal time-tracking tool built for consultants and working professionals, operated by an individual based in Hungary, EU. consultrack is available at consultrack.app.

For any privacy-related questions or requests, contact us at [email protected].

We collect only the data necessary to provide the service:

• Account data: your email address and a hashed password, used to authenticate you. Your password is hashed by Supabase Auth and is never stored in plaintext by us or accessible to us.
• Time tracking data: projects, clients, task names, hours logged, and any notes you enter — this is the core content of the service.
• Settings: your display name, company name, weekly hour targets, and optional monthly wage (used to calculate effective hourly rate on the dashboard).
• Subscription data: which plan you are on (Free or Pro).
• Technical logs: Vercel (our hosting provider) may log server-side request metadata including IP addresses per their own privacy policy. We do not access or process these logs ourselves. See vercel.com/legal/privacy-policy.

We do not use analytics trackers, advertising pixels, or behavioural tracking of any kind. We do not collect payment card data (payments are not yet implemented in the service).

All user data is stored in a PostgreSQL database managed by Supabase, Inc., hosted on Amazon Web Services (AWS) in Frankfurt, Germany (EU region: eu-central-1). Data is encrypted at rest and in transit using TLS.

Supabase's own privacy policy governs their infrastructure and processing: supabase.com/privacy.

Calendar events you import via .ics files are processed locally in your browser and stored in your browser's localStorage. This data never leaves your device.

consultrack uses exactly one cookie: a session cookie set by Supabase Auth to keep you logged in. This cookie is strictly necessary for the service to function. Without it you cannot remain authenticated.

We do not use tracking cookies, advertising cookies, analytics cookies, or any third-party cookies. No cookie consent banner is shown because the only cookie we set is strictly necessary.

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes.

We use the following sub-processors to operate the service:

• Vercel Inc. (US) — hosts the Next.js frontend. May process request metadata (IP, headers) per vercel.com/legal/privacy-policy.
• Supabase Inc. — provides database and authentication. User data is stored in the EU (Frankfurt). See supabase.com/privacy. Supabase also sends transactional emails (email confirmation, password reset) via their email provider.

Because we operate under EU law and store data in the EU, GDPR applies. You have the following rights:

• Right of access: you can request a copy of all personal data we hold about you.
• Right to rectification: you can correct inaccurate data directly in Settings or by contacting us.
• Right to erasure: you can delete your account and all associated data via Settings > Account > Delete account. Data is permanently deleted within 30 days.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.
• Right to lodge a complaint: you may contact your national data protection authority (in Hungary: the NAIH — naih.hu).

To exercise any of these rights, email [email protected]. We will respond within 30 days.

Your data is retained for as long as your account is active. When you delete your account, all associated personal data is permanently deleted from our database within 30 days. We do not retain backups of deleted user data beyond this period.

consultrack is not intended for users under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us at [email protected] and we will delete the account promptly.

We will notify you by email if we make material changes to this Privacy Policy. The "last updated" date at the top of this page will always reflect the date of the most recent revision. Continued use of consultrack after changes constitutes acceptance of the updated policy.

For any questions, concerns, or data requests regarding this Privacy Policy, please contact us at [email protected].