Privacy Policy

1. Introduction

Welcome to Atrack.ai. This Privacy Policy explains how BIAMI.io ("we," "us," or "our") collects, uses, and protects your personal information when you use our Atrack.ai time tracking Chrome extension ("the Extension").

We are committed to protecting your privacy and ensuring transparency about our data practices. This policy applies to all users of the Atrack.ai Extension and complies with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

By using the Extension, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Data Controller

The data controller responsible for your personal information is:

3. Information We Collect

We collect minimal personal information necessary to provide our service:

Account Information

• Email address - Used for account creation, authentication, and communication
• Name - Used to personalise your experience

Payment Information

If you purchase a paid subscription, payment processing is handled securely by Stripe. We do not store your credit card numbers, bank account details, or other financial information on our servers. Stripe's privacy policy governs how they handle your payment data. You can review it at stripe.com/privacy.

4. Information We Don't Collect

We believe in data minimisation. The following types of data are not collected by us:

• Usage analytics - We do not track how you use the Extension or what features you access
• Browsing history - We do not monitor or record the websites you visit
• Device information - We do not collect data about your device, operating system, or browser
• IP addresses - We do not log your IP address for tracking purposes
• Location data - We do not collect your geographic location

5. Local Data Storage

Your time tracking data is stored locally within the Chrome extension on your own device. This means:

• Your tracked time entries, projects, and tasks remain on your computer
• We do not have access to your time tracking data
• Your data is not transmitted to our servers
• You maintain full control over your data at all times

If you uninstall the Extension or clear your browser data, your locally stored time tracking information will be deleted.

6. Legal Basis for Processing

Under the GDPR, we process your personal information based on the following legal grounds:

• Contractual necessity - Processing your account information is necessary to provide you with the Extension and its features
• Legitimate interests - We may process data to improve our services, ensure security, and prevent fraud, where such interests are not overridden by your rights
• Consent - Where required, we will obtain your consent before processing your personal information for specific purposes, such as marketing communications
• Legal obligations - We may process data to comply with applicable laws, such as tax and accounting requirements

7. How We Use Your Information

We use the limited information we collect for the following purposes:

• Account management - To create and maintain your account
• Service delivery - To provide you with access to the Extension's features
• Communication - To send you important updates about the Extension, including security notices and changes to our terms
• Customer support - To respond to your enquiries and provide assistance
• Payment processing - To process subscription payments through Stripe

8. Data Sharing and Third Parties

We do not sell, rent, or trade your personal information. We share data only in the following circumstances:

Service Providers

Stripe - We use Stripe to process payments. When you make a purchase, your payment information is transmitted directly to Stripe. We receive only confirmation of successful payments and do not have access to your full payment details.

Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

9. International Data Transfers

As a UK-based company, your account information may be processed in the United Kingdom. If we transfer data outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Transfers to countries with adequate data protection laws
• Binding corporate rules or other legally recognised mechanisms

10. Data Retention

We retain your personal information only for as long as necessary:

• Account information - Retained while your account is active and for a reasonable period thereafter to comply with legal obligations
• Payment records - Retained as required by tax and accounting laws (typically 7 years)
• Local time tracking data - Stored on your device; you control its retention

When you delete your account, we will delete or anonymise your personal information within 30 days, unless retention is required by law.

11. Your Rights (GDPR)

If you are located in the UK or European Economic Area, you have the following rights under the GDPR:

• Right to access - Request a copy of the personal information we hold about you
• Right to rectification - Request correction of inaccurate or incomplete data
• Right to erasure - Request deletion of your personal information ("right to be forgotten")
• Right to restrict processing - Request that we limit how we use your data
• Right to data portability - Receive your data in a structured, machine-readable format
• Right to object - Object to processing based on legitimate interests
• Right to withdraw consent - Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at ask@biami.io. We will respond to your request within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection: ico.org.uk

12. Your Rights (CCPA - California Residents)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know - Request information about the categories and specific pieces of personal information we collect, use, and disclose
• Right to delete - Request deletion of your personal information
• Right to opt-out - Opt out of the sale of your personal information (note: we do not sell personal information)
• Right to non-discrimination - We will not discriminate against you for exercising your CCPA rights

To exercise your CCPA rights, please contact us at ask@biami.io.

Do Not Sell My Personal Information: We do not sell, rent, or share personal information with third parties for their direct marketing purposes.

13. Cookies and Local Storage

The Atrack.ai Chrome Extension uses Chrome's local storage API to store your time tracking data directly on your device. This is not the same as traditional browser cookies.

Extension Storage

The Extension stores the following data locally:

• Your time tracking entries, projects, and tasks
• Your preferences and settings
• Authentication tokens to keep you logged in

You can clear this data at any time by removing the Extension or clearing your browser's extension data.

14. Security Measures

We take the security of your information seriously and implement appropriate technical and organisational measures:

• Encryption - All data transmitted between the Extension and our servers uses HTTPS encryption
• Secure authentication - Passwords are securely hashed and never stored in plain text
• Access controls - Access to personal information is restricted to authorised personnel only
• Regular reviews - We regularly review our security practices and update them as necessary

While we strive to protect your personal information, no method of transmission over the internet is 100% secure. We encourage you to use strong, unique passwords and keep your account credentials confidential.

15. Children's Privacy

The Atrack.ai Extension is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16.

If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 16, please contact us at ask@biami.io.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons.

When we make changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you by email for significant changes that affect your rights
• Post the updated policy on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

17. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For data protection enquiries or to exercise your rights, please include "Privacy Request" in your email subject line.

UK Supervisory Authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113