Privacy & Cookie Policy

Last updated: July 2026 · TermsData Processing Agreement

1. Who we are

Teampus (teampus.app) is a time-tracking application operated by Divhaus (Romania) — the "Provider", "we". For any privacy matter contact office@divhaus.ro.

Where you use Teampus as an employee or member of a company workspace, that company is the data controller of the workspace data and we act as its processor under the Data Processing Agreement. For account registration data and our own operations, we act as controller.

2. What data we process

• Account data — name, email address, hashed password (we never store plain-text passwords), role, account timestamps.
• Company data — company name, registration code (CUI), address, default currency, company logo (if uploaded by an admin).
• Usage content — clients, client logos, tasks, billable rates, budgets, time entries (start/end times, durations, descriptions) and weekly timesheet entries created by users.
• Activity log — administrative audit records of actions performed in a workspace (who created/edited/deleted what, and when), visible to that workspace's admins.
• Technical data — session identifiers strictly necessary to keep you signed in. We do not run analytics trackers or advertising pixels.

3. Purposes and legal bases (GDPR Art. 6)

Purpose	Legal basis
Providing the time-tracking service (accounts, entries, reports, exports)	Contract performance — Art. 6(1)(b)
Security, session management, audit logging, backups	Legitimate interest — Art. 6(1)(f)
Notifying the operator of new registrations	Legitimate interest — Art. 6(1)(f)
Password-reset emails	Contract performance — Art. 6(1)(b)
Compliance with legal obligations	Legal obligation — Art. 6(1)(c)

4. Cookies

Teampus uses only strictly necessary cookies. There are no analytics, marketing, or third-party cookies.

Cookie	Purpose	Duration
connect.sid	Keeps you signed in (session)	7 days
tp_consent	Remembers that you dismissed the cookie notice	12 months
tp_theme	Remembers your light/dark appearance choice	12 months
tp_wiz	Remembers that you dismissed the setup guide	12 months

Because these are essential for the service to function (or store a preference you explicitly chose), they do not require consent under the ePrivacy rules; the banner is shown for transparency.

5. Storage, backups and retention

• Data is stored on servers operated on our behalf within the European Union.
• Automated database backups are created daily and retained on a rolling basis for approximately 14 days, after which they are overwritten.
• Account and workspace data is retained while the account or workspace exists. When you delete your account or a company workspace (Settings → Privacy & data), the data is removed from the live database immediately and disappears from backups within the backup rotation period above.

6. Recipients

We do not sell personal data and do not use it for advertising. Data is disclosed only to: (a) our hosting infrastructure provider (EU); (b) our email delivery provider, solely to send transactional messages such as password resets; (c) authorities where the law requires it.

7. Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with a supervisory authority — in Romania, ANSPDCP (dataprotection.ro).

Teampus provides self-service tools for the most common rights: Settings → Privacy & data lets you export a complete copy of your data (JSON) and delete your account — or, for administrators, the entire company workspace. For anything else, email office@divhaus.ro; we respond within 30 days.

If your data is managed inside a company workspace, requests may need to be addressed to your company administrator (the controller); we will assist them as processor.

8. Security

Passwords are stored using bcrypt hashing; password-reset tokens are stored hashed, are single-use and expire after 1 hour; sessions are invalidated on password change; access to workspace data is isolated per company; administrative actions are logged.

9. Changes

We may update this policy as the service evolves. Material changes will be announced in the application. The "Last updated" date above reflects the current version.

← Back to Teampus