TrueClock
Sign inStart Trial

Legal

Privacy Policy

This policy explains how Vibe Lab LLC collects, uses, stores, and shares information when you use TrueClock, including information accessed through the Google Sheets integration.

Effective date: September 10, 2026

1. Who we are

TrueClock is operated by Vibe Lab LLC (“Vibe Lab,” “TrueClock,” “we,” “us,” or “our”), a Minnesota limited liability company. Our mailing address is 9975 Valley View Road, Suite L, Eden Prairie, MN 55344. Questions or privacy requests may be sent to hello@thevibelab.com.

2. Information we collect

  • Account and company information: names, email addresses, roles, company settings, and authentication identifiers.
  • Time and business records: time entries, descriptions, clients, projects, tasks, rates, budgets, approval records, reports, and related files or imports.
  • Billing information: subscription status and transaction details. Payment-card information is collected and processed by Stripe; TrueClock does not store full card numbers.
  • Support and communications: messages you send us and records of service emails.
  • Technical and usage information: browser and device information, IP address, timestamps, pages viewed, feature activity, diagnostic logs, and security events.
  • Google integration information: the connected Google account email, encrypted OAuth access and refresh tokens, the Google Sheets permission you grant, and the spreadsheet URL or identifier selected by your company.

3. How we use information

We use information to:

  • provide, secure, maintain, and improve TrueClock;
  • authenticate users and enforce company roles and permissions;
  • calculate time, cost, profitability, budgets, approvals, and reports;
  • provide AI-assisted review, questions, and report configuration;
  • process subscriptions, send service communications, and provide support;
  • detect abuse, troubleshoot failures, and comply with legal obligations; and
  • analyze aggregate product and website usage.

4. Google user data and Google Sheets

A TrueClock company Super Admin may choose to connect a Google account. TrueClock requests the Google Sheets scope and basic identity scopes for the following limited purposes:

  • use the Google account email to show which account is connected;
  • verify access to the spreadsheet selected by the Super Admin; and
  • create, update, format, and clear report tabs in that selected spreadsheet when an authorized TrueClock user requests an export.

The Google Sheets scope can technically permit access to spreadsheets in the connected Google account. TrueClock’s application use is limited to the spreadsheet selected in TrueClock and the actions needed to provide the requested report-export feature. TrueClock does not use Google user data for advertising, does not sell it, and does not use it to train generalized AI models.

TrueClock’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

OAuth tokens are encrypted and retained while the integration remains connected so TrueClock can perform exports requested by authorized users. A Super Admin can delete TrueClock’s stored tokens by selecting Disconnect Google Sheets in TrueClock settings. A Google user can also revoke access through the Google Account connections page. Revocation at Google invalidates the authorization; disconnecting in TrueClock removes the locally stored token record. Report data already written to a Google spreadsheet remains in that spreadsheet until its owner edits or deletes it.

5. AI features

When an authorized user invokes an AI feature, TrueClock may send the relevant prompt and limited company data needed to produce the requested review, answer, or report configuration to our AI service provider. AI outputs may be inaccurate and remain subject to human review. Operational AI usage records retain metadata such as model, token counts, status, and estimated cost, but not prompts or model output. Google OAuth tokens are never sent to the AI provider.

6. How we share information

We share information only as needed with:

  • Clerk: authentication and account access.
  • Replit: application hosting, infrastructure, database, and file storage.
  • Stripe: subscription and payment processing.
  • Google: sign-in, website analytics, and Google Sheets exports when enabled.
  • Anthropic: AI processing when an authorized user invokes an AI feature.
  • Resend: transactional and service email delivery.
  • Professional advisers or authorities: when reasonably necessary for legal, security, or compliance purposes.
  • A successor: in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate protections.

We do not sell personal information or share it for cross-context behavioral advertising.

7. Cookies and analytics

TrueClock uses cookies and similar technologies required for authentication, session security, preferences, and service operation. Our public website uses Google Analytics to understand traffic and page usage. Browser settings and available Google controls may limit analytics collection, but blocking essential cookies may prevent the application from working.

8. Data retention and deletion

We retain account and company data while an account is active and afterward as reasonably needed to provide requested recovery, maintain security and audit records, resolve disputes, enforce agreements, and satisfy legal obligations. Retention periods vary by record type. Company administrators may remove certain records in the product. To request access, correction, export, or deletion of personal information, email hello@thevibelab.com. We may need to verify your identity and company authority. Some records may be retained where required by law or where deletion would compromise legitimate security, fraud-prevention, or accounting records.

9. Security and international processing

We use administrative, technical, and organizational safeguards designed to protect information, including encryption in transit, encryption of sensitive integration credentials at rest, access controls, and tenant separation. No method of transmission or storage is completely secure. Service providers may process information in the United States and other countries where they operate.

10. Your privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, portability, or restriction of certain processing, and to appeal a denied request. You may also withdraw consent where consent is the basis for processing. Submit requests to hello@thevibelab.com. We will not discriminate against you for exercising applicable privacy rights.

11. Children

TrueClock is intended for business users age 18 or older. We do not knowingly collect personal information from children. Contact us if you believe a child has provided information to TrueClock.

12. Changes to this policy

We may update this policy as TrueClock or applicable requirements change. We will post the updated policy with a new effective date and provide additional notice when required. If a change materially expands our use of Google user data, we will update our disclosures and request consent as required before using that data for the new purpose.

13. Contact us

Vibe Lab LLC
9975 Valley View Road, Suite L
Eden Prairie, MN 55344
hello@thevibelab.com