Trust & Privacy

How Time & Bill handles data

• Time & Bill is a hosted cloud application.
• The core application and its primary database run on Hetzner infrastructure in Germany. Profile pictures and company logos are stored in Ireland. Encrypted database and file backups are also stored there.
• AWS is used for sending emails and hosting the landing page.
• Grobmeier Solutions operates self-hosted GlitchTip for error monitoring and diagnostics on Hetzner infrastructure in Germany.
• Newsletter subscriber data is managed in a self-hosted Listmonk instance operated by Grobmeier Solutions.
• Customer data can be exported and deleted.

If you want the legal version, see the privacy policy. If you want the provider list, see the subprocessors page.

What “control” means here

Time & Bill is designed to give customers practical control over their data:

• you can export your data,
• you can delete your data,
• and you can see which providers are involved.

But Time & Bill is still a hosted SaaS product. We operate the infrastructure. This is not a zero-access design, not an end-to-end encrypted system, and not a local-only tool.

If you want a local-first developer workflow with no required cloud account, see HumbleBee.

Hosting and providers

Hetzner

• Purpose: application hosting
• Scope: Core application and primary database
• Location: Germany
• Required: yes, for the hosted product

Stripe

• Purpose: payments, subscriptions, invoices and customer portal
• Data: account reference, account email, plan, billing, payment and subscription information
• Required: for paid subscriptions, not for the free trial
• Stripe handles payment details on its payment page. Time & Bill does not store full card numbers. Stripe’s processing is not limited to Germany.
• The privacy policy gives more detail.

AWS

• Purpose: email delivery, file storage, backups and landing-page hosting
• Scope: recipients and email content, profile pictures, company logos, encrypted database/file backups and website infrastructure
• Storage: S3 files and backups in Ireland; the core application and primary database remain in Germany

An encrypted Borg backup is also stored on a Hetzner Storage Box.

Optional phone notifications

• iPhone notifications use Apple APNs through a dedicated AWS End User Messaging application in Ireland. Android notifications use Google FCM.
• Providers process delivery tokens, generic notification payloads and technical delivery information; Android also uses Firebase installation and SDK/device metadata.
• Phone notifications are optional. Full details, including sign-out and revocation behaviour, are in the privacy policy.

Newsletter software

• Purpose: newsletter subscriber management, subscription forms, unsubscribe handling, and campaign management
• Scope: newsletter subscriber data only, operated by Grobmeier Solutions with self-hosted Listmonk software
• Required: optional, only if you subscribe to the newsletter

Self-hosted GlitchTip

• Purpose: application error monitoring and diagnostics
• Scope: filtered technical diagnostics, stack traces, browser and operating-system information, application release information and performance data, processed by Grobmeier Solutions using self-hosted GlitchTip on Hetzner infrastructure in Germany
• Required: yes for the current hosted setup

The compact provider list is published on the subprocessors page.

Manual human access

Time & Bill is operated by a single person. Manual access to customer data is not part of the normal workflow.

Manual access may happen only when it is necessary for support or debugging. The guiding rules are:

• no routine browsing of customer data,
• only the minimum access needed to diagnose or resolve a problem,
• only when there is a concrete support or technical reason,
• and no claim that this is a zero-access system.

If that tradeoff is not the right fit for you, the local-first alternative in this product family is HumbleBee.

Security summary

The current public security summary is:

• TLS is used for the website and application traffic.
• Authentication and authorization are enforced through Spring Security.
• Current passwords use BCrypt-based hashing.
• Daily backups are performed.
• MFA is not currently supported.

Deployment options

There are now three relevant deployment models in the product family: