Privacy Policy
Last updated: 17 August 2026
This policy explains what personal data AL Data Labs collects, why, and what you can ask us to do with it. It covers this website (aldatalabs.com) and our product Time Tracker Pro, the time-tracking Power-Up for Trello.
1. Who we are
AL Data Labs is a data-engineering and software practice operating under the domain aldatalabs.com, registered as a sole proprietorship in Ukraine, and is the party responsible for the processing described here. For anything in this policy, including data-protection requests, write to support@aldatalabs.com — that address reaches us directly and is the fastest route to a person who can act on the request.
Our role differs by activity. For the work data the Power-Up records — time entries, estimates, Results and the board structure they hang off — AL Data Labs acts as a processor on behalf of the organisation whose Trello board the Power-Up is installed on; that organisation is the controller. For this website, for feedback and support correspondence, and for account and billing administration, AL Data Labs is the controller in its own right.
2. This website
aldatalabs.com is a static site. It sets no cookies, runs no analytics, no advertising and no third-party trackers, and loads no fonts, scripts or images from external services.
The site is hosted on Cloudflare Pages (Cloudflare, Inc.), which also provides the domain and DNS. Like any web host, Cloudflare processes technical request data — including your IP address and browser user-agent — to deliver the page and protect the service. We do not receive or retain those logs. See Cloudflare's Privacy Policy.
If you email us, we keep your message and address for as long as needed to answer it and to keep a record of the conversation.
3. Time Tracker Pro
What we store
The Power-Up runs inside Trello and stores only what it needs to attribute tracked time to a person, a card and a board:
| Category | Data | Why |
|---|---|---|
| Identity | Your Trello member ID, display name and avatar URL | To show whose time an entry belongs to, and to list board members |
| Board structure | Trello workspace, board, list and card IDs and names, and card labels | To group and filter time in reports |
| Tracked work | Time entries (start, end, duration, optional note), estimates, and the free-text "Result" written on a card | The core function of the product |
| Card content (paid AI plan only) | The Trello card description, and AI-generated fields derived from your Result text | Collected while the board is on a plan that includes those features; see retention below |
| Feedback | The message you type in the feedback form, the kind of feedback it is, your Trello user and board IDs, the Power-Up version, and an email address if you choose to give one | To answer and act on your feedback. No card titles or time data are attached. |
| Billing | Account name and plan status | To apply the correct subscription entitlements |
What we do not do
- We do not hold a Trello credential that can act on your account. The Power-Up authenticates with a short-lived token issued from Trello's own signed board context, and we verify that signature on every session.
- We do not read anything from Trello beyond the board the Power-Up is open on. Reports are a separate matter: they are built from data we already stored, and can span every board you have been a member of. Board membership is cached and not pruned when someone leaves, so a board you have left can still appear in your own reports.
- We do not sell, rent or share personal data with advertisers, and we do not profile you.
- We do not use your data to train machine-learning models.
Legal basis
Where the GDPR applies and we act as processor — the tracked work data above — we process on the instructions of the controller (your organisation), whose own basis is normally legitimate interest in managing and measuring its work, or the performance of its contract with you.
Where we act as controller in our own right, our basis is our legitimate interest in running and supporting the product: answering feedback and support messages, and administering accounts and subscriptions. You can object to that processing at any time — see "Your rights" below.
4. Where your data is processed
We use a small number of service providers (sub-processors):
| Provider | Role |
|---|---|
| Microsoft Azure | Application hosting for the Time Tracker Pro backend — West Europe (Netherlands) |
| Neon | Managed PostgreSQL database — eu-central-1 (Frankfurt, Germany) |
| Cloudflare | Domain registration, DNS, and static hosting for this website |
| GitHub | Source-code hosting, and static hosting for the Time Tracker Pro front end |
| Zoho Corporation | Email for our @aldatalabs.com addresses |
Your tracked work data is stored and processed in the European Union. The application runs in Azure's West Europe region and the database sits in Frankfurt; neither is replicated outside the EU.
The providers themselves are international companies, so support and administrative access can involve a transfer out of the EEA or the UK. Where it does, it is covered by the providers' standard contractual clauses. We will update this list before adding any new sub-processor that handles personal data.
5. How long we keep it
- Tracked time, estimates and Results — kept until you ask us to delete them. They are the record the product exists to keep, and a member who leaves a board keeps their historic entries so past reports stay correct. Note that removing the Power-Up from a board does not by itself delete anything: Trello sends us no signal when that happens, so the deletion has to be requested — see "Your rights" below.
- Card descriptions and AI-generated fields — the one exception, deleted automatically 90 days after a board's account leaves the plan that includes them. Time entries, estimates and your own written Results are never touched by that deletion.
- Feedback messages and email — kept while they are useful for support and product history.
6. Your rights
Subject to applicable law, you may request access to your personal data, correction, deletion, a portable copy, or restriction of processing, and you may object to processing. If you are a user of a Trello board where the Power-Up is installed, address the request to your own organisation first — they control that data; we will act on their instruction, and we will help you reach them if that is easier.
You can reach us directly at support@aldatalabs.com and we will respond within 30 days. To delete all data for a board, email us the board name: removing the Power-Up is not enough on its own, because Trello does not tell us that it happened.
If you are in the EEA or the UK, you also have the right to complain to your national data protection authority.
7. Security
Traffic is encrypted with TLS in transit and the database is encrypted at rest by our provider. The Power-Up authenticates with a short-lived token derived from Trello's own signed board context, and a request for a board that token does not cover is refused. Access to production systems is limited to AL Data Labs personnel who need it.
8. Children
Our products are business tools and are not directed at children under 16. We do not knowingly collect their data.
9. Changes to this policy
We will update this page when our processing changes and revise the "Last updated" date above. For material changes affecting existing users, we will also notify the boards concerned.