Privacy Policy

Last updated August 29, 2026

What we collect

To run iPhenomenon for your organization, we collect: your name and email address; your country and, where applicable, office location; the timesheet, leave, and project data you or your organization enter; and basic technical metadata (IP address, timestamps) recorded in our audit log when you take an action that changes data.

Why we collect it

Every field above exists to operate the service your organization signed up for — authenticating you, attributing timesheet/leave entries and approvals to the right person, enforcing who can see and change what within your organization, and keeping an audit trail of state-changing actions (see our Security & Compliance section). We don't use your data for advertising, and we don't sell it.

Who we share it with

We use a small number of infrastructure providers to run the service, each acting as a data processor on our behalf: Amazon Web Services (hosting, database, email delivery) and Stripe (subscription billing, for paid plans). None of them use your data for their own purposes.

How long we keep it

Your data is retained for as long as your organization's account is active. If you delete your own account (below), your personal identifiers are removed immediately; historical timesheet/leave/approval records tied to your account are kept — with your name replaced — so your organization's own records and audit trail stay accurate for everyone else who relied on them.

Your rights

You can, at any time, from your own account:

  • Download your data — a complete export of your profile, timesheets, and leave requests as a JSON file. Log in to download it.
  • Delete your account — permanently removes your name and email and disables your login. See exactly what this does and doesn't do above. Log in to manage this.
  • Correct your information — update your name and other details any time from your Profile page.

These rights are implemented as concrete, working features, not just policy text — in the same spirit as our ISO/IEC 27001:2022 control alignment.

Contact

Questions about this policy or your data — support@iphenomenon.com.