Privacy Policy

When you create a workspace or account we collect the details you provide:

• Account details: your name, email address, a hashed password (never stored in plain text), workspace name, timezone, and language preference.
• Time-tracking data you enter: projects, tasks, time entries, notes, tags, weekly capacity, and billable rates.
• People you invite: the names and email addresses of team members you add to your workspace.

When you use wagti we collect some technical and usage data automatically:

• Usage and device data: pages viewed, features used, approximate location derived from your IP address, browser and operating-system type, and referring pages. Most of this is gathered through Google Analytics (see below).
• Essential cookies: a small number of cookies needed to keep you signed in and to remember your language and light/dark theme. These are required for the service to work.

We use Google Analytics 4 to understand how wagti is used so we can improve it. Google Analytics sets its own cookies and records anonymised usage events (for example: a page was viewed, a timer was started, a plan was selected).

We configure it to protect your privacy: IP addresses are anonymised (anonymize_ip), and we do not send Google any personal identifiers — no names, no email addresses, no time-entry content. Events carry only non-identifying values such as your plan, role, and interface language.

Google processes this data on our behalf as a service provider. You can opt out at any time by installing the Google Analytics opt-out browser add-on (https://tools.google.com/dlpage/gaoptout) or by using your browser's tracking-protection settings.

Subscription payments are handled by our payment provider, MyFatoorah. Your card details are entered on MyFatoorah's secure systems — wagti never sees or stores your full card number. We keep a record of your invoices, plan, seat count, and subscription status so we can manage your account.

If you connect a third-party tool such as Jira, we store an encrypted connection token for your workspace and the issue keys you link to your time entries. When you stop a timer linked to a Jira issue, we send the tracked duration to that issue as a worklog. We do not copy or store Jira content (issue text) or Jira user profiles. You can disconnect at any time in your workspace settings, which deletes the stored token.

• To provide and operate the service — running your workspace, timers, reports, and billing.
• To authenticate you and keep your account secure.
• To process payments and manage subscriptions.
• To respond to support requests and communicate with you about your account.
• To understand product usage and improve wagti (analytics).
• To detect, prevent, and address fraud, abuse, and security issues.
• To comply with our legal obligations.

Where data-protection law such as the GDPR applies, we rely on: performance of our contract with you (to provide the service); our legitimate interests (to secure, maintain, and improve the service); your consent (for analytics cookies, where required); and compliance with legal obligations.

We do not sell your personal data. We share it only with the service providers that help us run wagti, and only as needed:

We may also disclose data if required by law, or to protect the rights, safety, and security of wagti and its users.

• Google (Google Analytics) — product usage analytics.
• MyFatoorah — payment processing.
• Atlassian (Jira) — only if you connect it, to log time to your issues.
• Our hosting provider — to run the application and database.
• Amazon SES — to send transactional email such as invitations and receipts.

wagti and our service providers may process your data on servers located outside your country. Where we transfer data internationally we take steps to ensure it remains protected in line with applicable law.

We keep your data for as long as your account is active. If you close your account we delete or anonymise your personal data within a reasonable period, except where we must retain certain records (for example invoices) to meet legal, tax, or accounting requirements.

We protect your data with encryption in transit (HTTPS), hashed passwords, role-based access controls, and tenant isolation between workspaces. No method of transmission or storage is completely secure, but we work to protect your information and to notify you where required if a breach occurs.

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing or withdraw your consent. To exercise any of these rights, email privacy@wagti.app and we will respond in line with applicable law.

wagti is a workplace tool and is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact privacy@wagti.app and we will delete it.

We may update this policy from time to time. When we make material changes we will update the date above and, where appropriate, notify you. Your continued use of wagti after an update means you accept the revised policy.

For any privacy question or request, email privacy@wagti.app. wagti is operated by RAITCO.