Privacy

Draft – to be reviewed.

inloop AB, Sweden, is responsible for the personal data described here.

• Email address – to send sign-in links and to identify your account. Kept until you delete your account.
• API keys, sign-in links and sessions – stored only as one-way hashes.
• IP addresses – requests without a key are counted per IP address and day. We store only a keyed hash that changes every day and is deleted the day after.
• Payments – handled by Stripe; we store your Stripe customer and subscription ids and plan, never card details.
• Email delivery – sign-in emails are sent through Cloudflare Email Service.

Data is stored with Cloudflare (accounts in the EU). You can delete your account in the dashboard at any time, or contact contact@exactclock.app for access, correction or deletion. You may also complain to the Swedish Authority for Privacy Protection (IMY).