Create Next App

At Urday (operated by eleventures GmbH), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our time tracking and project management platform. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

1. Data Controller

eleventures GmbH

Email: info@eleventures.ai

2. Information We Collect

Account Information

Email address (required for account creation and authentication)
First and last name
Password (stored securely using industry-standard hashing)
Optional profile information (profile image, phone number)

Usage Data

Time tracking entries (start time, end time, duration, descriptions)
Projects and tasks you create or are assigned to
Task assignments, completions, and verifications
Generated reports and analytics data

Technical Data

Session cookies (HTTP-only for authentication via SuperTokens)
IP address and device information
Browser type and version

3. How We Use Your Information

To provide, operate, and maintain our time tracking services
To authenticate users and manage sessions securely
To enable time tracking, project management, reporting, and invoicing features
To send administrative information, updates, and notifications
To monitor and analyze usage for security and fraud prevention
To comply with legal obligations and GDPR requirements

4. Legal Basis for Processing (GDPR)

Contract Performance: Processing is necessary to provide our services to you
Legitimate Interests: To improve our services, prevent fraud, and ensure security
Legal Obligations: To comply with applicable laws and regulations

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information in the following circumstances:

Within your organization (tenant) for collaboration and time tracking purposes
With service providers who assist in operating our platform (hosting, email delivery)
When required by law, regulation, or legal process

6. Data Storage and Security

Your data is stored in a PostgreSQL database with industry-standard security measures. We use self-hosted SuperTokens for authentication, ensuring your credentials are never stored in plain text.

Security measures include:

Password hashing using bcrypt
HTTP-only cookies for session management (no localStorage)
Regular security audits and monitoring

7. Cookies and Tracking

We use HTTP-only cookies for authentication and session management. These cookies are essential for the platform to function and cannot be disabled.

Essential Cookies

Session tokens (sAccessToken, sRefreshToken) are used to maintain your authenticated session. These cookies are automatically deleted when you sign out or after 7 days of inactivity.

8. Your Data Protection Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

Right of Access: Request copies of your personal data
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data
Right to Restriction: Request restriction of processing
Right to Data Portability: Request transfer of your data to another service
Right to Object: Object to processing of your data
Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise these rights, please contact us at info@eleventures.ai

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. If you request account deletion, we will delete your data within 30 days, except where we are required by law to retain certain information.

10. International Data Transfers

Your data is processed and stored within the European Union. If we transfer data outside the EU, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

11. Children's Privacy

Our service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the 'Last Updated' date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

eleventures GmbH

Email: info@eleventures.ai

2. Information We Collect

Account Information

Email address (required for account creation and authentication)
First and last name
Password (stored securely using industry-standard hashing)
Optional profile information (profile image, phone number)

Usage Data

Time tracking entries (start time, end time, duration, descriptions)
Projects and tasks you create or are assigned to
Task assignments, completions, and verifications
Generated reports and analytics data

Technical Data

Session cookies (HTTP-only for authentication via SuperTokens)
IP address and device information
Browser type and version

3. How We Use Your Information

To provide, operate, and maintain our time tracking services

To authenticate users and manage sessions securely

To enable time tracking, project management, reporting, and invoicing features

To send administrative information, updates, and notifications

To monitor and analyze usage for security and fraud prevention

To comply with legal obligations and GDPR requirements

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information in the following circumstances:

Within your organization (tenant) for collaboration and time tracking purposes

With service providers who assist in operating our platform (hosting, email delivery)

When required by law, regulation, or legal process

6. Data Storage and Security

Your data is stored in a PostgreSQL database with industry-standard security measures. We use self-hosted SuperTokens for authentication, ensuring your credentials are never stored in plain text.

Security measures include:

Password hashing using bcrypt
HTTP-only cookies for session management (no localStorage)
Regular security audits and monitoring

7. Cookies and Tracking

We use HTTP-only cookies for authentication and session management. These cookies are essential for the platform to function and cannot be disabled.

Essential Cookies

Session tokens (sAccessToken, sRefreshToken) are used to maintain your authenticated session. These cookies are automatically deleted when you sign out or after 7 days of inactivity.

8. Your Data Protection Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

Right of Access: Request copies of your personal data

Right to Rectification: Request correction of inaccurate or incomplete data

Right to Erasure: Request deletion of your personal data

Right to Restriction: Request restriction of processing

Right to Data Portability: Request transfer of your data to another service

Right to Object: Object to processing of your data

Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise these rights, please contact us at info@eleventures.ai