Privacy

WeekSign collects only what it needs to send a timesheet, get it signed and keep a record of the signing. We do not track you, sell data or show ads.

Who is responsible for your data: [company name], [org. number], [address]. Contact: support@weeksign.com.

What we collect

From	What	Why
People who send timesheets	Name, email address, hours, notes and categories per day, clients and their approvers (name, email, org. number)	To make, send and keep your timesheets
People who sign	Email address, the name typed when signing, the signature, any question asked about a day	To show who signed and what they asked
Both, when signing or sending	Date and time, IP address, browser or app version	For the signing record (the audit page of the PDF) and to stop abuse

The app has no analytics, advertising or tracking SDKs. It does not take screenshots or watch what you do on your device.

Where it is kept and who helps us

Supabase, database and sign-in, servers in Frankfurt, Germany (EU).
Resend, sends the emails. It sees the recipient, the email and the PDF attached to it.
Cloudflare, hosts this website and the approval page, and receives email sent to weeksign.com addresses.

Each of them processes data only to provide their service to us, under a data processing agreement.

How long we keep it

Timesheets and their signing records are kept while the sender's account exists, because a signed record is only useful if it lasts. [Retention period after an account is closed.]

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it, by writing to support@weeksign.com. Deleting a signed timesheet also deletes the record for the other party, so we will tell you who else is affected first. You can also complain to your data protection authority (in Norway: Datatilsynet).

Changes

If this policy changes in a way that matters, we will say so in the app before it takes effect.