App privacy policy
What the app keeps, and why.
This policy explains what the eZacto mobile app collects, why, who sees it, and your choices. It covers the app only; the eZacto instance you connect to is operated by you or your organization under its own policies. For the ezacto.com marketing site, see the site privacy policy.
What the app handles
Sign-in token and cached records. Your session token is stored securely on your device. Time entries, projects, and invoices are sent to and cached from your eZacto instance so the app works quickly and offline.
Timezone. The app sends your device's timezone to your instance so a running timer is filed on your local day.
Support requests. If you contact support from the app, your message, the optional reply email you provide, your platform, and the app version are sent to eZacto and recorded as a support ticket.
Crash diagnostics (optional). If your build enables crash reporting, crash and error diagnostics are sent to our processor (Sentry), used only to fix problems, with no advertising identifiers and personal request data scrubbed.
The app does not use third-party advertising and does not track you across other apps or websites.
How it is used
To provide time tracking and billing, keep you signed in, file your time on the correct day, answer support requests, and diagnose crashes. That is all.
Who sees it
Your business records go only to your eZacto instance. Support requests go to the eZacto team. Crash diagnostics, when enabled, go to Sentry as a processor. Subscription purchases are handled by Apple or Google under their own policies. We do not sell your data.
Retention
The token and cache live on your device until you sign out or remove the app. Records on your instance follow your organization's retention. Support tickets are kept as long as needed to resolve and improve support.
Security
Data in transit is encrypted with HTTPS. The token is held in the device's secure storage. No method is perfectly secure, but we take reasonable measures to protect your information.
Your choices
Sign out to clear the token and cache from the device. Ask your administrator to correct or delete records on your instance. For support-ticket data, contact us. To have your account and the data held against it deleted, see account and data deletion.
Children
The app is not directed to children under 13 and we do not knowingly collect their data.
Changes
We may update this policy; the "last updated" date above will change, and significant changes will be noted in the app where appropriate.
Contact
Privacy questions: use Contact support in the app.