Sandtime.io Trust Center
Privacy-first time tracking, made in Poland and hosted in the EU.
Trust should be backed by specifics. This page explains how Sandtime.io handles workspace data, which service providers support the product, how backups work, and where to report security concerns.
These are Sandtime.io operational commitments, not third-party certification marks.
Privacy and ownership
Your organization controls its workspace data
For information your team records in its workspace, your organization determines why that data is processed and remains the controller. Sandtime.io acts as the processor, using the data to provide and protect the service.
Sandtime.io acts as a controller where appropriate for account administration, service communication, security, and its own legal obligations. The Privacy Policy explains these roles and the rights available to individuals.
Data portability
Export your organization when you need it
Administrators can download the complete organization and its related data from Settings with one click. The export is available without opening a support ticket, so your team can keep a copy or prepare to move its records.
Read about data ownershipInfrastructure and resilience
EU production hosting with automated backups
Sandtime.io production servers and database backups are hosted on OVHcloud infrastructure in the European Union.
Database backups run every eight hours and are retained for 14 days. Deleting an account or organization removes it from active systems, but an individual customer's records cannot be selectively removed from an existing backup archive.
Backup archives are kept for recovery and isolated from normal product use until they expire under the retention schedule.
Product privacy
Time tracking without surveillance software
Sandtime.io records the work people declare. It does not take screenshots, log keystrokes, secretly monitor devices, or track application and website activity.
Managers get timesheets, project visibility, approvals, reminders, and reports without turning time tracking into employee surveillance.
See all featuresSecurity and availability
Public reporting and service status
Security researchers and users can report a potential vulnerability directly to the Sandtime.io security team. Responsible disclosures are reviewed and acknowledged publicly when appropriate.
Company accountability
Built and operated in Poland
Sandtime.io is built and operated by Sanddev sp. z o.o., a software company based at Ślężna 104/2A, 53-111 Wrocław, Poland. The Sanddev team created Sandtime.io for its own client work and still uses it every day.
Documentation
Trust and legal documents
Review the policies, operational resources, and contacts behind these commitments.
- Privacy PolicyHow personal information is collected, used, stored, and protected.
- Subprocessors and connected servicesProviders and optional services involved in delivering Sandtime.io.
- SecurityVulnerability reporting and responsible disclosure acknowledgements.
- Terms of UseThe rules and responsibilities that apply when using the service.
- Cookie PolicyCookies, similar technologies, and consent choices.
- DMCA PolicyHow to report alleged copyright infringement.
- Trademark PolicyGuidelines for using the Sandtime.io name and brand.
- AttributionOpen-source licenses and software acknowledgements.