Billable · Legal
Privacy policy
Effective August 20, 2026
Billable is a time-tracking and billing tool made by Ops Automators. The short version: we collect what the product needs to work, nothing more. There are no analytics scripts, no ad trackers, and nothing gets sold, shared, or used to train anything. Here is the long version.
Two kinds of data, two different roles
Billable holds two very different things, and we treat them differently.
Your account data. Your name, email address, password, and role. We decide how this is handled, which makes us the controller for it. This page is mostly about that.
What you put in your workspace. Client names, projects, tasks, hours, rates, notes. That data belongs to your business, and some of it describes your clients, who have never heard of us. For that data we act on your instructions and nothing else: we host it, back it up, and show it to the people you have granted access. We do not read it, mine it, or touch it except to run the service or when you ask us to help with something. If you need a data processing agreement for your own compliance work, email us and we will sort one out.
What we collect
- Account details: name, email, role. Passwords are stored as bcrypt hashes (cost factor 12). We never store or log the plaintext, and we cannot recover it, only reset it.
- Workspace content: whatever you enter. Time entries, projects, clients, tasks, notes, bill and cost rates.
- API keys, if you create them: shown to you once, then stored only as a SHA-256 hash.
- Contact form messages, if you send one: your name, email, optional company, and the message. Used to reply to you, kept in our inbox, never added to any list.
- Server logs from our hosting provider: IP address, request path, timestamp. Standard operational logs, retained briefly, used for debugging and abuse prevention.
That is the complete list. There is no hidden telemetry to disclose.
Cookies
Two, both essential, which is why you did not see a cookie banner:
- A session cookie that keeps you signed in. It expires after 7 days and rotates daily while you use the app.
- A CSRF token that protects the sign-in form.
Your light-or-dark theme choice is kept in your browser’s local storage and never sent to us. No analytics cookies, no advertising cookies, no fingerprinting, no pixels. If a future feature ever needs a non-essential cookie, we will ask first.
Where your data lives
The database is Postgres, hosted by Neon in the AWS us-east-2 region (Ohio, United States). The application runs on Vercel. Connections are encrypted in transit with TLS, and the database encrypts data at rest.
Who else touches it
Three companies process data on our behalf. Each one gets only what its job requires:
| Provider | Job | What it sees |
|---|---|---|
| Vercel | Application hosting and delivery | Traffic passing through the app, server logs |
| Neon | Postgres database (AWS us-east-2, US) | Stored workspace and account data |
| Resend | Transactional email | Recipient address and the message body of alert emails |
Nobody else. No analytics vendor, no ad network, no data broker. If this list ever grows, the change lands here before it lands in production.
The only email the product sends is email you asked for: nightly alert digests and account notices, delivered to the address you configured. There is no marketing list. Signing up for the product does not sign you up for anything else.
What we will never do
- Sell your data, or your clients’ data. To anyone, for anything.
- Use workspace content to train AI models, ours or anyone else’s.
- Show your rates, costs, or margins to your portal clients. That boundary is enforced in the database query layer and covered by automated tests that fail the build if it breaks.
- Hold your data hostage. Export works on every plan, in every account state, including lapsed ones. The product exists because a tool once did this to us, so this one is a promise with a grudge behind it.
Retention and deletion
We keep your data while your account is active. When you delete your account, or ask us to, we remove it from live systems within 30 days. Operational backups expire on a rolling basis after that, so copies age out rather than living forever. Server logs at our hosting provider are retained on their standard short schedule.
Before any of that, export everything yourself: the export endpoint produces CSV or JSON of every table you have the right to see.
Your rights
Access and portability are self-serve through the export. Correction is self-serve too, since you can edit anything you entered. For deletion, or anything you cannot reach yourself, email zach@opsautomators.com and a human will handle it within 30 days, usually much faster. If you are in a jurisdiction that grants specific privacy rights (GDPR, CCPA, and friends), those rights apply and the same address is where to exercise them.
One honest caveat: if your data is in someone else’s Billable workspace, say your hours are tracked by an agency you work with, the workspace owner controls it and your request should usually go to them. We will help them honour it.
Children
Billable is a business tool and is not directed at anyone under 16. We do not knowingly collect data from children.
When this page changes
We will post changes here and update the effective date. For anything material, account owners get an email before it takes effect, not after.
Contact
Ops Automators, operator of billable8.com.
zach@opsautomators.com. A person reads this inbox, not a queue.