Privacy policy
humanhours is a product of Triad B.V. (trading as Triad Agency), registered in Amsterdam, the Netherlands. This page describes what we collect, why, and how to remove your data.
This is the public summary. The processor's privacy notice and DPA are available on request via support@triadagency.ai.
What we collect
As a user of the dashboard:
- Your email address (for sign-in via magic link).
- Your name (optional, you set it in settings).
- Your billing details if you upgrade (handled by Stripe; we never see card data).
As an org operator who tracks events:
- The fields you send to
/v1/track:agent_id,task_type,outcome, optional duration / cost / metadata / audit samples. - Aggregates we compute (hours saved, cost saved, net saved).
- The originating IP and User-Agent of
/v1/trackrequests for abuse detection.
As a visitor of the marketing site:
- We do not run third-party analytics. We do not set cookies on
/,/pricing, or/docs/*other than the session cookie that's also set during sign-in.
Why we collect it
- Authenticate you (email).
- Compute and serve back your ROI metrics (event payload).
- Bill you accurately when you're on a paid plan (Stripe details).
- Detect abuse and rate-limit per API key (request IP, User-Agent).
Where it lives
EU-resident infrastructure: Supabase Postgres in EU West, Vercel fra1, Resend EU, Sentry EU. See /docs/security for the full subprocessor list.
Your rights (GDPR)
- Access: export everything we store about your org from
/settings. Or emailsupport@triadagency.ai. - Erasure: close your org from
/settings; we hard-delete event rows immediately and your auth + billing record within 30 days. - Portability: the events table is exportable as CSV from
/reports/export?format=csv. - Object / restrict: email
support@triadagency.ai. We respond within 30 days.
Retention
| Data | Retention |
|---|---|
| Free tier events | 30 days |
| Pro tier events | 365 days |
| Enterprise events | Negotiated, default 730 days |
| API key hashes | Until revoked + 30 days |
| Sign-in audit log | 365 days |
| Stripe events (webhook log) | 365 days |
Changes
We post material changes to this policy at /docs/legal/privacy with a dated entry below. Continued use after the change date constitutes acceptance.
| Date | Change |
|---|---|
| 2026-05-06 | Initial public version. |
Contact
humanhours is a product of Triad B.V. (trading as Triad Agency), Amsterdam, Netherlands. Reach support, legal, or data subject requests at support@triadagency.ai. We respond within 1 business day for support and 30 days for formal data subject requests.