Privacy policy

Who we are

Cerisel is a task and time tracking app made by Aretia Labs ({{FOUNDER: legal entity type and registration number}}, {{FOUNDER: registered address}}). Aretia Labs is the controller of the personal data described here.

This policy explains what we collect, why, who sees it, how long we keep it and the choices you have.

What we collect

• Your account: your email address, username and name. Your password is handled by the Aretia Labs sign-in service and stored only as a secure hash.
• Your sign-in session: the IP address and user agent (browser and device type) of the device you signed in from.
• What you put in the app: tasks, projects, tags, columns, time entries and goals.
• Your settings: profile preferences, themes and accent colour, and your time zone.
• Feedback you send: your message and the category you pick, with the app version, page and browser it was sent from. It’s stored with your account and emailed to our support inbox.
• Technical data: counters that limit how often a request can be made, per user and per type of request, kept in windows of about a minute (failed authentication on the API is also throttled per IP address); and server error logs, which don’t contain passwords or cookie values.
• Analytics, only if you agree: usage events, a pseudonymous user ID once you’re signed in, browser and device information, session replays with all text and inputs masked and images blocked, and details of errors. See Who we share it with below.
• Browser storage: a few small cookies and local entries, listed under Cookies and browser storage below.

We don’t ask for payment details today, and we don’t collect data to build advertising profiles.

Why we use it, and our legal basis

• To create your account, sign you in, save and sync your work, show your reports and send the emails you need. Basis: performing our contract with you (GDPR Article 6(1)(b)).
• To keep the service secure, prevent abuse with rate limits, and fix errors. Basis: our legitimate interests (Article 6(1)(f)).
• To measure how the product is used, understand problems through masked session replay, and find errors, only if you agree. Basis: your consent (Article 6(1)(a)). You can withdraw it at any time. The anonymous error reports described under Cookies and browser storage run on our legitimate interests (Article 6(1)(f)).
• To meet legal duties, such as tax and accounting rules, and lawful requests. Basis: legal obligation (Article 6(1)(c)).

We don’t sell your data and we don’t use it for advertising.

How long we keep it

• Your app data: kept while you have an account.
• Trash: items you delete are kept in Trash for 30 days, then purged. The purge runs the next time you use the app.
• Account deletion: deleting your account in the web app erases your tasks, projects and other app data straight away. It deletes your whole Aretia Labs account, which also signs you in to other Aretia Labs apps.
• Feedback: kept while you have an account, and erased with it. Copies in our support inbox are kept as long as we need them to help you.
• Webhook event records: 30 days.
• Rate-limit counters: a few minutes.
• Analytics data: {{FOUNDER: PostHog retention}}. Deleting your account also deletes your analytics data.
• Server logs: {{FOUNDER: log retention}}.
• Backups: {{FOUNDER: backup retention}}. Deleted data leaves backups when they expire.
• Records we must keep by law: for as long as the law requires.

Who we share it with

We share data only with providers that help us run the service, and only as much as they need to do that job.

• Hosting: Amazon Web Services.
• Accounts and sign-in: the Aretia Labs sign-in service.
• Bot protection: Cloudflare Turnstile, on sign-up and password reset. Cloudflare receives your IP address and browser signals to tell people from bots.
• Transactional email (account verification, password reset, account deletion confirmation): Amazon Web Services (Amazon SES), which also delivers feedback you send to our support inbox.
• Payments: a payment provider, only once paid plans launch. It will act as merchant of record for those payments.
• Analytics: PostHog, Inc., which stores the data in the United States. It receives usage events, a pseudonymous user ID once you’re signed in, browser and device information, session replays (all text and inputs masked, images blocked) and error details, for product analytics, session replay and error tracking. All of this is sent only with your consent, except the anonymous server error reports described under Cookies and browser storage.

We may also share data where the law requires it, or to protect people’s safety.

International transfers

Our servers are in the Amazon Web Services us-east-1 region, in the United States, and PostHog stores analytics data in the United States too, so your data is transferred outside the EEA, the UK and India. Where the law requires it, we rely on safeguards such as an adequacy decision or the Standard Contractual Clauses (and the UK equivalent) with our providers.

Your rights

Depending on where you live, you can ask to access, correct, delete or move your data, restrict or object to how we use it, and withdraw consent. You can do much of this yourself: edit your details in Settings, export your data, or delete your account. For anything else, write to {{FOUNDER: privacy email}}. We’ll reply within the time the law sets, usually one month. If you’re unhappy with our answer, you can complain to your local data protection authority.

• EU and UK (GDPR): the rights above, including the right to object to processing based on our legitimate interests.
• India (Digital Personal Data Protection Act, 2023): the right to access information about your data, to have it corrected, completed or updated, to have it erased, to seek grievance redressal, and to nominate someone to exercise your rights if you die or can’t act. Grievance officer: {{FOUNDER: grievance officer name and email}}.
• California (CCPA/CPRA): the right to know what we collect, to delete it, to correct it, and to opt out of the sale or sharing of personal information. We don’t sell or share personal information, and we won’t treat you worse for using your rights. We honour the Global Privacy Control signal.

Children

Cerisel isn’t meant for anyone under {{FOUNDER: minimum age, suggested 16}}, and we don’t knowingly collect their data. If you think a child has given us data, write to us and we’ll delete it.

Security

Data is encrypted in transit, and passwords are stored only as a secure hash. Access to production systems is limited to the people who need it. No system is perfectly secure; if a breach affects your data we’ll tell you, and the regulators, as the law requires.

Cookies and browser storage

We use a few small cookies. All are essential or remember your preferences. We don’t use advertising or tracking cookies.

• hm_consent (6 months): records your cookie choice. It’s set only when you make a choice.
• nb-variant (1 year): your light or dark theme.
• nb-density (1 year): how compact the app looks.
• nb-tz (1 year): your time zone, so dates and times show correctly.
• cerisel-panel (1 year): whether the side panel is open.
• Sign-in cookies: several, some with __Secure- or __Host- prefixes, set by the Aretia Labs sign-in service to keep you signed in. They are kept for the length of your session.
• localStorage and sessionStorage: your calendar layout and small local flags, such as cerisel-arrived, a one-time sessionStorage flag that smooths the move from sign-in into the app and is removed once read. These stay on your device.

Analytics is a separate category. It’s off by default and we turn it on only if you accept it. We treat a Global Privacy Control or Do Not Track signal as a choice to opt out.

Error reports without consent: when our servers hit an error, they send PostHog an anonymous report with the kind of error and where in the code it happened. It holds no account, no message text and no request address or content, and is not tied to you.

To withdraw your consent at any time, switch Analytics off in “Cookie settings” in the site footer, or in Settings → Your data in the app, and save. You can also choose “Reject non-essential” in the cookie notice.

Changes

If we change this policy we’ll update the date above, and tell you in the app or by email when a change is significant. For the rules that apply to the service itself, see the terms, and for future paid plans the refund and cancellation policy.

Contact

Questions or requests about your data? Write to {{FOUNDER: privacy email}} or {{FOUNDER: registered address}}.