TimeGoals

Privacy Policy

Draft notice: This is a starting template, not legal advice. Replace the bracketed placeholders with your actual practices and have it reviewed by a lawyer before you rely on it in production — especially if you'll have users in the EU/UK (GDPR) or California (CCPA/CPRA).

Last updated: September 18, 2026

1. Overview

This Privacy Policy explains how Good Goals Media ("we," "us," or "our") collects, uses, and protects your information when you use TimeGoals (the "Service"), including the TimeGoals for Asana browser extension described in Section 4a.

2. Information We Collect

Account information: name, email address, password (hashed), and team/workspace details you provide when you sign up.

Usage data you create: time entries, projects, clients, invoices, expenses, and attachments you enter into the Service.

Payment information: if you subscribe to a paid plan, payment details are collected and processed by our payment processor, Stripe. We do not store your full card number on our servers.

Technical data: IP address, browser type, device information, and log data collected automatically when you use the Service, for security and troubleshooting purposes.

3. How We Use Your Information

We use your information to:

  • Provide, operate, and maintain the Service (e.g., generating invoices, tracking time, running reports).
  • Process payments and manage subscriptions.
  • Send you service-related communications, such as invoice delivery confirmations or account notices.
  • Monitor and improve the security, performance, and reliability of the Service.
  • Comply with legal obligations.

We do not sell your personal information.

4. Third-Party Services

We share information with third-party providers only as needed to operate the Service, including:

  • Stripe — payment processing.
  • Mailtrap — transactional email delivery (e.g., invoice delivery, account notices).
  • Linode (Akamai Connected Cloud) — application hosting and infrastructure.

These providers are only permitted to use your information as necessary to provide their services to us.

4a. TimeGoals for Asana (Browser Extension)

If you install the TimeGoals for Asana browser extension, it reads the URL and title of tabs on app.asana.com only, so it can identify the task you have open and label the timer it starts. It does not read any other website, and it does not use Asana's API or have access to your Asana password.

The extension sends that task/project name and ID to your own TimeGoals account, at the TimeGoals URL you configure in the extension's settings, using a personal API token you generate yourself. That data becomes part of your account's regular time-entry data, handled the same as any other information described in this policy. The extension does not send data anywhere else, and does not share data with Asana, Inc. or any third party.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within a reasonable period, except where we are required to retain it for legal, accounting, or fraud-prevention purposes.

6. Your Rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at contact@goodgoalsmedia.com. We will respond within the timeframe required by applicable law.

7. Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Cookies

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Service is used. You can control cookies through your browser settings, though disabling them may affect functionality.

9. Children's Privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children.

10. International Data Transfers

If you access the Service from outside the United States, your information may be transferred to and processed in the United States, which may have different data protection laws than your own.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you (for example, by email or an in-app notice).

12. Contact

Questions about this Privacy Policy? Contact us at contact@goodgoalsmedia.com.