Privacy policy

Effective October 10, 2026 · Applies to clocto.app and every organization address (name.clocto.app)

Clocto ("Clocto", "we", "us") is a time tracking, project budgeting and billing app. Organizations use Clocto for their team; people in that team sign in with Google to log their working time. Anyone with a Google account can create an organization on Clocto. People join an existing organization only when its administrator adds them and they accept, or when they ask and an administrator approves. This policy explains what information Clocto accesses, how it uses, stores and shares it, how long it is kept, and the choices you have. Questions: privacy@clocto.app.

Who we are

Clocto is the app shown at clocto.app, named "Clocto" on Google's sign-in screen. Its developer and operator is responsible for the information described here and can be reached at privacy@clocto.app.

Summary

• Clocto uses your Google account to sign you in, and, with your permission, reads your Google Calendar (read only) to show your meetings and suggest time entries.
• Clocto never changes your calendar, never sells data, never uses it for advertising, and never uses Google user data to train artificial intelligence or machine learning models.
• Your organization controls the work records its team enters; you can remove Clocto's access to your Google account at any time.

Google user data

Data accessed

When you choose "Sign in with Google", Clocto asks Google for these permissions:

• Basic profile and email (email, profile): your name, email address, Google account identifier and profile picture link.
• Google Calendar events, read only (https://www.googleapis.com/auth/calendar.events.readonly): the title, start and end time and identifier of events in the calendars you choose (your main calendar unless you choose others). For an administrator who turns on holiday sync for a project, the events of the holiday calendar they choose.
• Your list of Google calendars, read only (https://www.googleapis.com/auth/calendar.calendarlist.readonly): the names, colors and identifiers of the calendars in your Google Calendar list, so you can choose on My settings which ones Clocto reads.

Clocto does not ask for, and cannot reach, your Gmail, Drive, contacts or any other Google data.

How Clocto uses Google user data

• Profile and email: to sign you in and to match you to your organization's team. Your email address is how your organization's administrators add you.
• Your calendar list: shown on My settings so you can choose which calendars Clocto reads (your main calendar unless you choose others).
• Calendar events: to show your meetings next to your time entries on the Calendar screen, and to suggest time entries from your meetings (Magic Fill). You review every suggestion before anything is saved. Holiday sync turns a holiday calendar's events into days off for planning.
• Clocto uses Google user data only for these features, which are visible in the app. It never creates, changes or deletes anything in your Google account.

How Google user data is stored and protected

• Calendar events are read directly by your browser from Google and shown on screen. They are not sent to Clocto's servers, except what you choose to save: when you save a time entry from a meeting, Clocto stores the entry with the event's identifier and the description you keep (by default the event title); when you dismiss a suggestion, Clocto stores the event's identifier, date and title so it is not suggested again; holiday sync stores the holiday dates and names.
• Your name and email are stored with your organization's records in Clocto's database (Supabase).
• When you choose calendars on My settings, Clocto stores their identifiers (not their names or events), and whether you turned Google Calendar off, so your choice follows you to other devices. Only you can see or change it.
• Google's permission to read your calendar lasts about an hour and is kept only in your browser. Clocto does not store it on its servers and does not request long-lived ("offline") access.
• All data travels encrypted (HTTPS). The database is encrypted at rest by our provider. Access rules in the database let each person see and change only what their role allows, and every request is checked against the signed-in account.

How Google user data is shared

• Saved time entries (including any meeting title you kept) are visible to the administrators of your organization, as part of its records.
• Clocto's service providers process data only to run Clocto for us: Supabase (database and sign-in) and Cloudflare (website hosting).
• We do not sell or transfer Google user data to anyone else, including advertising platforms or data brokers, except if the law requires it, or as part of a merger or acquisition with your prior consent.

How long it is kept and how to delete it

• Calendar events that you do not save are never stored by Clocto.
• Saved time entries are kept as long as your organization uses Clocto, because they support billing and audits. You can edit or delete your own entries until a month is submitted; after that, your organization's owner can unlock the month.
• To have your Google-derived data (profile, email, saved meeting titles) deleted, ask your organization's administrator or email privacy@clocto.app. We answer within 30 days. When an organization stops using Clocto, its records are deleted on request, and in any case within 90 days.
• To stop Clocto reading your calendar, choose Disconnect under Google Calendar on My settings in Clocto (Clocto then hands the permission back to Google and stops reading your calendar on all your devices), or remove its access at myaccount.google.com/permissions. Clocto works without your calendar.

Limited Use

Clocto's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, Clocto:

1. uses Google user data only to provide and improve the user-facing features described above, which are prominent in Clocto;
2. transfers Google user data to others only as needed to provide those features, to comply with the law, for security, or as part of a merger or acquisition with your consent;
3. does not let people read Google user data, unless you agree to it for specific data (for example when you ask us for help), it is needed for security (such as investigating abuse), it is needed to comply with the law, or the data is aggregated and anonymized for internal operations;
4. does not use Google user data for advertising, does not sell it, and does not use it to determine credit-worthiness or for lending;
5. does not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models;
6. does not use Google APIs or Google user data to generate images or other media with artificial intelligence, including AI-generated non-consensual intimate imagery (NCII).

Other information Clocto handles

• Information from your organization. Your organization's administrators record your role, employee ID, daily working hours and pay or billing rates.
• Creating or joining an organization. When you create an organization, Clocto stores its name, your name and email address, and the date you agreed to the terms of service and this policy. When an administrator adds your email, you see the organization's name the next time you sign in and choose whether to join. When you ask to join an organization, its administrators see your name and email address.
• Work records. The time entries you log (date, project, phase, hours, description), the months you submit, and the projects, budgets, events, expenses and contractor invoices your organization manages. Your organization may also sync project details from its own Google Sheets; that sync runs under the organization's own Google account, not yours.
• Technical information. Our hosting and database providers keep standard server logs (for example IP address, browser type and time of request) for security and troubleshooting. When a sign-in is refused because the account is not part of an organization, we record the email address and the time so an administrator can fix it.

How we use information

Only to run Clocto for you and your organization: to sign you in, show and save work records, calculate budgets, billing and reports, send administrators notices about refused sign-ins and sync problems, keep the service secure, and fix problems.

Who we share information with

• Your organization. Its administrators can see and manage the team's records. Your organization may publish a read-only report (for example hours and timesheet status per person) to people it chooses. People in one organization cannot see another organization's records.
• People at your organization's email domain. If your organization sets a company email domain, people who sign up with an email at that domain see your organization's name, so they can ask to join. They see nothing else.
• Service providers: Supabase (database and sign-in), Cloudflare (website hosting), Google (sign-in, calendar access, and fonts on our pages), under terms that limit their use of the data.
• Legal reasons: if the law requires it, or to protect the rights and safety of users and the service.

Retention and deletion

Work records, invitations and requests to join are kept for as long as your organization uses Clocto. When a person leaves, the organization marks them inactive and keeps their history. When an organization stops using Clocto, we delete its records on request, and in any case within 90 days of the end of the service, unless the law requires us to keep them longer. Server logs are kept for a limited time by our providers.

Your choices and rights

• See, correct, export or delete your information: ask your organization's administrator, or write to privacy@clocto.app.
• Remove Clocto's access to your Google account at any time at myaccount.google.com/permissions.
• Sign out of Clocto from the profile menu; this also clears Clocto's data from your browser.

Cookies and browser storage

Clocto uses your browser's storage to keep you signed in, to hold the short-lived calendar permission, to show your data quickly, and to remember screen preferences. We do not use advertising or tracking cookies.

Children

Clocto is a work tool for organizations and is not meant for children under 16.

Changes to this policy

If we change this policy, we will update the date at the top and, for important changes, tell organizations' administrators before the change takes effect. If a change affects how Clocto uses Google user data, we will ask for your permission again where required.

Contact

Email privacy@clocto.app.