Privacy & your data
Your client work is yours. Each workspace’s data is kept separate, and TinyHub is built to keep clients cleanly isolated from one another — that separation is enforced on the server, not just hidden in the interface, so a workspace you don’t belong to is never sent to your browser at all.
What other people in a workspace can see
Section titled “What other people in a workspace can see”Inviting someone to a client workspace shows them that workspace and nothing else. Your other clients stay invisible, including their names.
Within a shared workspace, most things are shared by design — that’s the point of sharing it. These are the exceptions:
| Stays private to you | Who else can see it |
|---|---|
| Your hourly rate | Nobody, ever. |
| Your tracked time | Only the workspace owner, and only by switching to the team view. |
| A task or note marked private | Nobody — including owners and admins. Its comments go with it. |
| An event marked private | Nobody sees the title. Teammates see only that you’re busy then. |
See Members, roles & ownership for the full picture.
Usage analytics are off unless you turn them on
Section titled “Usage analytics are off unless you turn them on”TinyHub records no usage analytics against your account by default. It’s opt-in, under Profile → Privacy, and you can switch it back off at any time.
If you do turn it on, what’s recorded is which features you use and when, plus counts such as how many tasks an import created — never task titles, note contents or client names. It’s first-party only: the data stays in the EU and isn’t shared with third parties.
TinyHub also honours your browser’s Do Not Track setting.
Your data, portable
Section titled “Your data, portable”You can export any workspace as a JSON bundle at any time. The export is scoped to that one workspace, and to what you are allowed to see in it.
Deleting your account
Section titled “Deleting your account”You can ask us to delete your account at any time. There’s no self-serve button for it yet — you request it and we action it.
Deletion isn’t instant once actioned, on purpose: your account is disabled straight away and the data is then held for 7 days before being purged for good, so a mistake can still be undone inside that window.