Skip to main content

enter Your Hours

Menu

Enter Your Hours™ Privacy Policy

Effective Date: September 23, 2026

EYH Software Inc., a Delaware corporation with offices located at 605 East Boynton Beach Blvd., Boynton Beach, FL 33435 (“EYH,” “we,” “us,” or “our“), respects the privacy of the individuals and organizations that interact with us. This Privacy Policy (this “Policy“) describes how we collect, use, disclose, and protect information in connection with: (i) our websites, including https://www.enteryourhours.com and any other website that links to this Policy (collectively, the “Website“); (ii) the Enter Your Hours™ web-based time and billing management system, together with the Support Portal, the Documentation, and any related applications and features (collectively, the “Services“); and (iii) our sales, marketing, and support communications.

PLEASE READ THIS POLICY CAREFULLY. BY ACCESSING OR USING THE WEBSITE OR THE SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTAND THIS POLICY. IF YOU DO NOT AGREE WITH THIS POLICY, DO NOT ACCESS OR USE THE WEBSITE OR THE SERVICES.

1. Relationship to the Services Agreement

  1. Defined Terms. Access to and use of the Services is governed by the Enter Your Hours™ Services Agreement or such other written agreement as may be in effect between EYH and a Customer (the “Services Agreement“). Capitalized terms used but not defined in this Policy, including “Customer,” “Authorized User,” “Customer Data,” “Aggregated Statistics,” “EYH Materials,” “Subcontractor,” “Third-Party Products,” “Confidential Information,” “Feedback,” and “Law,” have the meanings given to them in the Services Agreement.
  2. Services Agreement Controls. This Policy is a description of our information practices. It is not a contract, and it does not create any rights or obligations that are not set forth in the Services Agreement. Nothing in this Policy limits, expands, waives, or otherwise modifies any right, license, or interest granted to or reserved by EYH under the Services Agreement, including EYH’s rights with respect to Customer Data, Aggregated Statistics, Feedback, and the EYH Materials, or any disclaimer or limitation of liability set forth in the Services Agreement. In the event of any conflict or inconsistency between this Policy and the Services Agreement with respect to Customer Data or the Services, the Services Agreement governs.

2. Customer Data and EYH Data; Our Respective Roles

  1. Customer Data. The Services are business-to-business software. When a Customer or its Authorized Users submit, post, or transmit information through the Services—such as time entries, client and matter records, billing rates, invoices, expense records, and the names and contact details of the Customer’s personnel, clients, and other contacts—that information is Customer Data. As between EYH and the Customer, the Customer owns all right, title, and interest in and to Customer Data. EYH processes Customer Data under the license granted to EYH and its Subcontractors in the Services Agreement, for the purpose of providing the Services to the Customer and for the other purposes permitted by the Services Agreement, including the compilation of Aggregated Statistics. The Customer, not EYH, determines what Customer Data is submitted to the Services and is solely responsible for the development, content, operation, maintenance, backup, and use of Customer Data.
  2. Processor and Service Provider Role. Where applicable privacy Law distinguishes between a “controller” or “business” and a “processor” or “service provider,” the Customer acts as the controller or business with respect to any personal information contained in Customer Data, and EYH acts as a processor or service provider on the Customer’s behalf. The Services Agreement, together with any configuration choices the Customer makes within the Services, constitutes the Customer’s instructions to EYH regarding the processing of Customer Data.
  3. Individuals Whose Information Is in Customer Data. If you are an Authorized User, or if your personal information has been included in Customer Data by a Customer (for example, because you are a client, employee, or contractor of a Customer), the Customer’s own privacy practices govern the collection and use of that information, and you should direct any questions or requests regarding it to the Customer. We may refer requests we receive concerning Customer Data to the relevant Customer, and we will act on such requests only as directed by the Customer, as required by applicable Law, and in a manner consistent with the Services Agreement.
  4. Customer Responsibilities. The Customer is responsible for providing any notices to, and obtaining any consents and rights from, its Authorized Users and any other individuals whose personal information is included in Customer Data that are required under applicable Law for the submission of that information to the Services and for its processing by EYH and its Subcontractors as described in this Policy and the Services Agreement. The Customer is also responsible for making its Authorized Users aware of the Services Agreement and this Policy. The Services are not designed to store government identification numbers, financial account credentials, protected health information, or similar sensitive personal information, except to the extent a specific feature of the Services requires it; a Customer that chooses to submit such information does so at its own discretion and is responsible for complying with all Laws applicable to it.
  5. EYH Data. Information that EYH collects and maintains for its own purposes—including account and billing information for the Customer relationship, information collected through the Website, Support Portal and other communications, information derived from EYH’s monitoring of access to and use of the Services, and Aggregated Statistics (collectively, “EYH Data“)—is not Customer Data. EYH determines the purposes and means of processing EYH Data, and this Policy describes that processing. Consistent with the Services Agreement, Aggregated Statistics and any information derived from EYH’s monitoring of a Customer’s access to or use of the Services form part of the EYH Materials, and all right, title, and interest in and to Aggregated Statistics, including all Intellectual Property Rights therein, belong to and are retained solely by EYH.

3. Information We Collect

  1. Information You Provide to Us. We collect information that you provide directly to us, including:
    1. Account and Registration Information. When a Customer signs up for the Services, we collect information about the Customer and its designated administrator, such as business name, business address, the administrator’s name, business email address, telephone number, and job title, and login credentials. When a Customer’s administrator assigns login credentials to additional Authorized Users, we receive each Authorized User’s name, email address, role or permissions, and login credentials.
    2. Billing and Payment Information. To invoice and collect Fees, we collect billing contact details, billing address, tax information where applicable, and payment information. Payment card and bank account details are collected, processed, and stored by our third-party payment processor, Stripe, Inc. (“Stripe“), in accordance with Stripe’s own terms and privacy policy, available at https://stripe.com/privacy. EYH does not store complete payment card numbers on its own systems.
    3. Customer Data. As described in Section 2, Customers and Authorized Users submit Customer Data through the Services in the ordinary course of using them. The nature and content of Customer Data are determined by the Customer.
    4. Support Portal and Other Communications. When you submit a ticket through the Support Portal, contact us by email or telephone, request a demonstration, or otherwise communicate with us, we collect the contents of those communications, your contact details, and any attachments, screenshots, or Customer Data that you choose to share with us in connection with the request. As provided in the Services Agreement, our provision of support may require the Customer to give us timely access to Customer Data, Customer Systems, and personnel.
    5. Website Forms. If you complete a form on the Website—for example, to request information, sign up for a trial or free plan, or subscribe to communications—we collect the information you enter, such as your name, company, business email address, telephone number, and any message you include.
    6. Feedback. If you or your personnel send us comments, questions, suggestions, or other Feedback regarding the Services or the EYH Materials, we collect the contents of that Feedback. EYH may use Feedback in its sole discretion, without attribution or compensation, in accordance with the Services Agreement.
  2. Information We Collect Automatically. When you access the Website or the Services, we and our service providers automatically collect certain information, including:
    1. Usage and Monitoring Data. Consistent with the Services Agreement, EYH may monitor a Customer’s and its Authorized Users’ access to and use of the Services. In doing so, we automatically collect information such as login dates and times, features and pages accessed, actions taken within the Services, session duration, error and diagnostic logs, and performance metrics.
    2. Device and Connection Data. We collect the IP address, browser type and version, operating system, device type, screen resolution, language settings, referring URLs, and similar technical information for the devices used to access the Website or the Services.
    3. Cookies and Similar Technologies. We and our service providers use cookies, local storage, pixels, and similar technologies as described in Section 7.
  3. Information from Third Parties. We may receive information about you from third parties, including:
    1. Third-Party Products and Integrations. If a Customer connects the Services to Third-Party Products (for example, accounting, payment, calendar, or document applications), we may receive information from those products as needed to operate the integration. A Customer’s use of Third-Party Products is subject to the applicable third party’s own terms and privacy policies, for which EYH is not responsible.
    2. Business and Marketing Sources. We may receive business contact information about prospective customers from referral partners, publicly available sources, or data providers, and we may combine it with information we collect directly.
    3. Service Providers. Our payment processor, email delivery, analytics, and similar providers may furnish us with information about transactions, message deliverability, or activity relating to your use of the Website or the Services.

4. How We Use Information

We use EYH Data, and we process Customer Data under the license granted in the Services Agreement, for the following purposes:

  1. Providing the Services. To operate, host, maintain, secure, support, and deliver the Services and the Website; to authenticate Customers and Authorized Users; to reproduce, store, back up, display, transmit, and otherwise process Customer Data as necessary or useful to provide the Services to the Customer, including through any automated or AI-assisted features of the Services; and to provide the Support Portal and respond to support requests.
  2. Account Administration and Billing. To create and manage Customer accounts, calculate and collect Fees, process payments, send invoices and payment reminders, pursue past-due amounts, and maintain business and financial records.
  3. Monitoring, Aggregated Statistics, and Improvement. To monitor use of the Services; to compile Aggregated Statistics, including statistical and performance information relating to the provision and operation of the Services and information derived from Customer Data in an aggregate and anonymized manner; to analyze usage trends; to develop, test, and improve the Services, the EYH Materials, and new products and features; and to benchmark performance. As provided in the Services Agreement, EYH owns Aggregated Statistics and may make them publicly available and otherwise use them to the extent and in the manner permitted under applicable Law. Aggregated Statistics do not identify any Customer, Authorized User, or other individual.
  4. Security, Fraud Prevention, and Enforcement. To detect, investigate, prevent, and respond to threats or attacks on the EYH Materials, Harmful Code, fraudulent or illegal activity, security incidents, and violations of the Services Agreement or this Policy; to suspend or terminate access to the Services where permitted by the Services Agreement; and to enforce and exercise EYH’s rights under the Services Agreement.
  5. Communications. To send administrative and transactional communications, such as account notices, security alerts, technical notices, notices of amendments to the Services Agreement or this Policy, and responses to your inquiries. We may also send you marketing communications about EYH products, features, promotions, and events. You may opt out of marketing communications as described in Section 9; administrative and transactional communications will continue for as long as you have an account or an active relationship with us.
  6. Legal Compliance. To comply with applicable Law; to respond to lawful requests from courts, regulators, and other governmental authorities; and to establish, exercise, or defend legal claims.
  7. Other Purposes. For any other purpose disclosed to you at the time of collection or to which you otherwise consent.

5. How We Disclose Information

We disclose information in the following circumstances:

  1. To the Customer. Information about Authorized Users, including their account details and their activity within the Services, is accessible to the Customer’s administrators and to other Authorized Users as configured by the Customer. The Customer controls Customer Data and who within its organization may access it.
  2. Subcontractors and Service Providers. Consistent with the Services Agreement, EYH may engage Subcontractors and other third-party service providers to perform some or all of its obligations in providing, maintaining, and managing the Services, including cloud hosting and infrastructure, data storage and backup, payment processing (Stripe), email and communications delivery, customer support and ticketing, analytics (Google Analytics), and security services. These providers may access Customer Data and EYH Data only as necessary to perform services for EYH, and they are bound by contractual obligations to protect that information and to use it only for that purpose.
  3. Third-Party Products. When a Customer or an Authorized User elects to use a Third-Party Product with the Services, we disclose information to that third party as directed by the Customer or as needed to enable the integration. EYH is not responsible for the privacy or security practices of any third party.
  4. Affiliates. We may disclose information to our affiliates and to any entity under common ownership or control with EYH for the purposes described in this Policy.
  5. Business Transfers. Consistent with EYH’s right under the Services Agreement to assign its rights and delegate its obligations to an affiliate or to a purchaser of substantially all of the assets of the business, we may disclose or transfer information in connection with any merger, financing, acquisition, reorganization, or sale of all or substantially all of the assets of the business, or in connection with any similar transaction or proceeding, including during due diligence for such a transaction.
  6. Legal Requirements. We may disclose information to the extent required to comply with the order of a court or other governmental body, or as otherwise necessary to comply with applicable Law. Where the information to be disclosed constitutes a Customer’s Confidential Information under the Services Agreement, we will provide notice to the Customer and otherwise proceed as required by the Services Agreement.
  7. Protection of Rights. We may disclose information where we believe in good faith that disclosure is necessary to establish or protect EYH’s rights under the Services Agreement or otherwise, including to make required court or arbitration filings; to protect the security or integrity of the Services and the EYH Materials; or to protect the rights, property, or safety of EYH, our customers, or others.
  8. With Consent or at the Customer’s Direction. We may disclose information with your consent or at the direction of the Customer.
  9. Aggregated Statistics. We may disclose or publish Aggregated Statistics in compliance with applicable Law.
  10. No Sale of Personal Information. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising or targeted advertising, as those terms are defined under applicable U.S. state privacy Laws. We do not display third-party advertising on the Website or the Services.

6. Data Retention

  1. Customer Data. We retain Customer Data for as long as the Customer’s account is active and the Services Agreement remains in effect. Upon termination of the Services Agreement, EYH may disable all Customer and Authorized User access to the Services. Following termination, we retain Customer Data for a period of sixty (60) days (the “Retention Period“), after which we delete it from our production systems. Except as expressly provided in the Services Agreement, EYH has no obligation to return or export Customer Data after termination, and the Customer is solely responsible for backing up and exporting its Customer Data during the term of the Services Agreement using the features available within the Services; EYH may, in its discretion, assist a Customer with an export of its Customer Data during the Retention Period. Residual copies of Customer Data may persist in routine backups after the Retention Period until those backups are overwritten in the ordinary course, and we may retain Customer Data beyond the Retention Period to the extent required by Law or necessary to establish, exercise, or defend legal claims or to exercise EYH’s rights under the Services Agreement.
  2. Aggregated Statistics and Monitoring Data. Because Aggregated Statistics are anonymized and owned by EYH, and because the Customer’s grant of rights to incorporate Customer Data within Aggregated Statistics is irrevocable under the Services Agreement, we may retain and use Aggregated Statistics indefinitely, including after termination of the Services Agreement and expiration of the Retention Period. Usage and monitoring data forms part of the EYH Materials and is retained for as long as it remains useful for the purposes described in this Policy.
  3. Other EYH Data. We retain account, billing, support, and Website information for as long as needed to fulfill the purposes for which it was collected, including for the duration of the Customer relationship and for a reasonable period thereafter to maintain business and financial records, resolve disputes, enforce our agreements, and comply with Law. Confidential Information exchanged under the Services Agreement is returned or destroyed as provided therein.

7. Cookies and Similar Technologies

  1. Technologies We Use. We and our service providers use cookies (small text files stored on your device), browser local storage, pixels, and similar technologies on the Website and within the Services. These technologies fall into the following categories: (i) essential technologies that are required to operate the Website and the Services, such as those used for authentication, session management, security, and load balancing; (ii) functional technologies that remember your settings and preferences; and (iii) analytics technologies that help us understand how the Website and the Services are used.
  2. Google Analytics. We use Google Analytics, a web analytics service provided by Google LLC (“Google“). Google Analytics uses cookies and similar technologies to collect information about how visitors use the Website, such as pages viewed, time spent, referring websites, and approximate location derived from IP address, and reports that information to us in aggregate form. Google may use this information in accordance with its own privacy policy, available at https://policies.google.com/privacy. You can prevent Google Analytics from collecting your information by installing the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.
  3. Your Choices. Most browsers allow you to refuse or delete cookies through their settings. Because essential technologies are required for the Services to function, disabling them may prevent you from logging in or using certain features.
  4. Do Not Track and Global Privacy Control. We do not currently respond to “Do Not Track” browser signals. Because we do not sell personal information or share it for targeted advertising, there is no sale or sharing from which to opt out; if our practices change, we will update this Policy and honor opt-out preference signals as required by applicable Law.

8. Security

  1. Safeguards. EYH maintains commercially reasonable administrative, technical, and physical safeguards designed to protect information within our control against unauthorized access, use, disclosure, alteration, or destruction.
  2. No Guarantee. No method of transmission over the Internet and no method of electronic storage is completely secure. EYH does not represent, warrant, or guarantee that the Services, the EYH Materials, or any information will be secure or free from unauthorized access, Harmful Code, or loss, and nothing in this Policy constitutes a warranty regarding security. Any remedies with respect to a breach of data or system security are solely as set forth in, and subject to the disclaimers and limitations of liability contained in, the Services Agreement.
  3. Your Responsibilities. The Customer is responsible for assigning login credentials to its Authorized Users, for keeping all credentials confidential, for controlling access to the Services through the Customer Systems, and for all acts and omissions of its Authorized Users. If you become aware of any unauthorized access to or use of your credentials, your account, or the EYH Materials, you must notify EYH immediately as provided in the Services Agreement.
  4. Security Incidents. If we become aware of a security incident affecting Customer Data that requires notification under applicable Law, we will notify the affected Customer without undue delay in accordance with applicable Law. Because the Customer owns and controls Customer Data, any notification to individuals whose personal information is included in Customer Data is the Customer’s responsibility, except to the extent Law requires otherwise.

9. Your Choices

  1. Account Information. Customers and Authorized Users may review and update their account information through the Services or by contacting their Customer administrator. Customers control Customer Data and may add, modify, export, and delete it within the Services during the term of the Services Agreement.
  2. Marketing Communications. You may opt out of marketing emails by following the unsubscribe instructions in those emails or by contacting us as described in Section 15. Opting out of marketing communications does not affect administrative or transactional communications relating to your account or the Services.
  3. Cookies. You may manage cookies and similar technologies as described in Section 7.

10. Privacy Rights Under U.S. State Laws

  1. Rights That May Apply. Depending on your state of residence and subject to applicable exemptions, you may have the right to: (i) confirm whether we process your personal information and access it; (ii) correct inaccuracies in your personal information; (iii) delete your personal information; (iv) obtain a copy of your personal information in a portable format; (v) opt out of the sale of personal information, the sharing of personal information for targeted advertising, or profiling in furtherance of decisions that produce legal or similarly significant effects; and (vi) not be discriminated against for exercising these rights.
  2. Business Context. The Services are provided to businesses, and most of the personal information we process consists of business contact information collected in a commercial or employment context, which many state privacy Laws exempt from their scope. Certain state privacy Laws also apply only to businesses that meet specified revenue or data-volume thresholds. Where a state privacy Law applies to us and to your personal information, we will honor your rights as that Law requires.
  3. Requests Relating to Customer Data. Requests concerning personal information contained in Customer Data should be directed to the Customer that submitted the information. We will assist the Customer in responding to such requests to the extent required by applicable Law and the Services Agreement.
  4. How to Exercise Your Rights. To exercise any rights that apply to you, contact us as described in Section 15. We may need to verify your identity before responding, and we may ask you to provide information sufficient to confirm that you are the person about whom we collected information. You may designate an authorized agent to make a request on your behalf; we may require the agent to provide proof of authorization and may require you to verify your identity directly. If we deny your request, you may appeal by contacting us and stating that you wish to appeal; we will respond to appeals within the time required by applicable Law.
  5. Categories of Personal Information. In the preceding twelve months, we have collected the following categories of personal information from the sources and for the purposes described in Sections 3 and 4: identifiers (such as name, email address, telephone number, and IP address); commercial information (such as billing and subscription records); internet or other electronic network activity information (such as usage, log, and device data); professional or employment-related information (such as employer, job title, and role); and inferences drawn from the foregoing for the purposes described in this Policy. We disclose these categories to the recipients described in Section 5. We do not sell personal information and do not share it for cross-context behavioral advertising.

11. International Users and Data Transfers

  1. Processing in the United States. EYH is located in the United States, and information we collect is stored and processed in the United States and in any other location where we or our service providers maintain facilities. If you access the Website or the Services from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where privacy Laws may differ from those in your jurisdiction. Consistent with the Services Agreement, the Customer is responsible for complying with all Laws that govern the export, transfer, or processing of Customer Data outside the United States.
  2. Where Non-U.S. Data Protection Laws Apply. To the extent the data protection Laws of the European Economic Area, the United Kingdom, or another jurisdiction apply to personal information we process: (i) with respect to personal information in Customer Data, the Customer is the controller and EYH is a processor acting on the Customer’s documented instructions as set forth in the Services Agreement; and (ii) with respect to EYH Data, EYH is the controller and processes personal information on the basis of the performance of a contract, our legitimate interests (including operating, securing, and improving the Services and marketing to business customers), compliance with legal obligations, and, where required, consent. Individuals in those jurisdictions may have additional rights, including the right to lodge a complaint with a supervisory authority, and may contact us as described in Section 15 to exercise them.

12. Children's Privacy

The Website and the Services are intended for use by businesses and their adult personnel and are not directed to children. We do not knowingly collect personal information from children under the age of thirteen (13). If we learn that we have collected personal information from a child under 13 without appropriate parental consent, we will take steps to delete it. If you believe a child has provided us with personal information, please contact us as described in Section 15.

13. Third-Party Websites and Services

The Website and the Services may contain links to, or enable integrations with, websites, applications, and services operated by third parties, including Third-Party Products. This Policy does not apply to those third parties, and EYH is not responsible for their content, privacy practices, or security. We encourage you to review the privacy policies of any third-party website or service you use.

14. Changes to This Policy

We may amend or modify this Policy at any time in our sole discretion. When we do, we will post the revised Policy on the Website and update the Effective Date shown above. Where a change materially affects the treatment of Customer Data, or where notice is otherwise required by Law, we will also provide notice in the manner described in the Services Agreement, which may include posting a message visible to the Customer upon logging into the Services or sending an email to the address provided by the Customer upon sign-up for the Services. Your continued access to or use of the Website or the Services on or after the Effective Date of a revised Policy constitutes your acceptance of the revised Policy.

15. Contact Us

If you have questions about this Policy or our privacy practices, or wish to exercise any rights described in this Policy, you may contact us as follows:

EYH Software Inc.
Attn: Privacy
605 East Boynton Beach Blvd.
Boynton Beach, FL 33435
Email: privacy@enteryourhours.com

Customers may also contact us through the Support Portal.