Privacy Policy
Last updated: April 2026
1. Introduction
This Privacy Policy explains how Team Spawn ("we", "us", "our") collects, uses, and protects personal data when you use our application and services.
We are committed to protecting your privacy and processing your data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and relevant United States privacy laws.
2. Data Controller and Processor
- For users of organizations using our service, your organization acts as the Data Controller.
- Team Spawn acts as a Data Processor, processing personal data on behalf of our clients under a Data Processing Agreement (DPA).
For certain limited purposes (such as account creation, billing, and support), Team Spawn may act as a Data Controller.
3. Personal Data We Collect
a) Account Information
- Name
- Email address
- Profile picture (if provided)
- Language, location, and timezone
b) Work and Timesheet Data
- Time entries
- Activities and projects
- Submission and approval records
c) Profile and User-Provided Data
- Skills and competencies
- Notes or preferences provided by the user (e.g., project matching information)
d) System-Generated Data
- Internal identifiers (e.g., tags)
- Account metadata (e.g., creation date)
4. Legal Basis for Processing (GDPR)
We process personal data on the following legal bases:
- Performance of a contract (e.g., providing and operating the service)
- Legitimate interests (e.g., improving the service, ensuring security, preventing misuse)
- Legal obligations (where applicable)
5. How We Use Personal Data
We process personal data to:
- Provide and operate the service
- Manage timesheets and work activities
- Enable approvals and reporting
- Improve user experience and matching features
- Ensure security and prevent misuse
6. Data Sharing
We do not sell or share personal data for advertising purposes.
We may share data with:
- The organization (your employer or client, acting as Data Controller)
- Trusted service providers (e.g., cloud hosting providers)
- Competent authorities when required by law
All third-party providers are bound by appropriate data protection obligations.
7. Data Retention
We retain personal data only for as long as necessary to:
- Provide the service
- Comply with legal obligations
- Resolve disputes and enforce agreements
Retention periods may vary depending on the type of data and client requirements.
8. Your Rights
Under applicable data protection laws, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Request restriction of processing
- Receive a copy of your data in a structured, portable format
You may exercise these rights through your account settings or by contacting us.
You also have the right to lodge a complaint with a supervisory authority in your country of residence.
9. Data Security
We implement appropriate technical and organizational measures to protect personal data, including:
- Secure data storage
- Access controls
- Encryption in transit
10. International Data Transfers
Your data may be processed in countries outside your own, including outside the European Economic Area (EEA).
Where such transfers occur, we rely on appropriate safeguards, such as Standard Contractual Clauses, to ensure that your data remains protected.
11. United States Privacy Rights
Depending on your location, you may have additional rights under applicable U.S. state privacy laws.
We do not sell personal data or share it for cross-context behavioral advertising.
12. Contact
If you have any questions about this Privacy Policy or your personal data, you may contact us or your organization (as the Data Controller):
Email: support@teamspawn.com
13. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.